mlkem: clear a few (pointers to) secrets
The ML-KEM code is doing a pretty poor job at cleaning up secrets it no
longer needs. This commit clears a few stack-based arrays containing
secrets or not obviously public information and stack-based structs
containing pointers to secrets.
ok jsing kenjiro
databases/postgresql-plv8js: update to 3.2.4
Changes:
- fix GUC assignment issue
- fix possible out of bounds in windowing
- better handling of composite types
- add named composite record support
- better management of in/out/inout variables
- more removal of unsupported postgres version
- patch v8 build from breaking macos 15.5 change
- fix macro attribute access (enables pg 18 support)
- additional checks for plv8 external arrays
NAS-139136 / 26.04 / remove fork+exec from services/base.py (#17933)
This removes the random `systemctl` fork+exec logic and uses the
existing dbus socket I/O logic that we have in this file. This means all
the extra services that we manage will no longer incur a fork+exec
penalty.