texlive[68516] trunk: add memoize-extract.pl and .py to

[commits+karl at tug.org]

Revision: 68516
          https://tug.org/svn/texlive?view=revision&revision=68516
Author:   karl
Date:     2023-10-11 22:52:09 +0200 (Wed, 11 Oct 2023)
Log Message:
-----------
add memoize-extract.pl and .py to shell_escape_commands

Modified Paths:
--------------
    trunk/Build/source/texk/kpathsea/ChangeLog
    trunk/Build/source/texk/kpathsea/texmf.cnf
    trunk/Master/texmf-dist/web2c/texmf.cnf

Modified: trunk/Build/source/texk/kpathsea/ChangeLog
===================================================================
--- trunk/Build/source/texk/kpathsea/ChangeLog	2023-10-11 20:46:52 UTC (rev 68515)
+++ trunk/Build/source/texk/kpathsea/ChangeLog	2023-10-11 20:52:09 UTC (rev 68516)
@@ -1,3 +1,8 @@
+2023-10-11  Karl Berry  <karl at tug.org>
+
+	* texmf.cnf (shell_escape_commands): add memoize-extract.pl and .py,
+	after analysis on tlsecurity. https://ctan.org/pkg/memoize
+
 2023-10-09  Karl Berry  <karl at freefriends.org>
 
 	* tex-file.c (kpathsea_name_ok): also allow files under

Modified: trunk/Build/source/texk/kpathsea/texmf.cnf
===================================================================
--- trunk/Build/source/texk/kpathsea/texmf.cnf	2023-10-11 20:46:52 UTC (rev 68515)
+++ trunk/Build/source/texk/kpathsea/texmf.cnf	2023-10-11 20:52:09 UTC (rev 68516)
@@ -653,6 +653,8 @@
 gregorio,\
 kpsewhich,\
 makeindex,\
+memoize-extract.pl,
+memoize-extract.py,\
 repstopdf,\
 r-mpost,\
 texosquery-jre8,\
@@ -692,15 +694,17 @@
 % current directory.
 % 
 % Best to use this only when a particular job requires it, not set
-% globally in a configuration file or the environment.
+% globally in a configuration file or the environment. We recommend
+% using it transiently for particular jobs, not making a permanent setting.
 %TEXMFOUTPUT = /tmp
-%
-% A related environment variable is TEXMF_OUTPUT_DIRECTORY.  It
-% overrides the current directory for all output files in TeX and the other
-% engines. It cannot be set in a configuration file. And it's even more
-% important to use it only temporarily, when required, to avoid massive
-% confusion about where the output files are ending up.
 
+% As of TeX Live 2024, a related environment variable is
+% TEXMF_OUTPUT_DIRECTORY. It overrides the current directory for all
+% output files in TeX and the other engines. It cannot be set in a
+% configuration file. And it's even more important to use it only
+% temporarily, when required, to avoid massive confusion about where the
+% output files are ending up.
+
 % If a dynamic file creation fails, log the command to this file, in
 % either the current directory or TEXMFOUTPUT.  Set to the
 % empty string or  0  to avoid logging.

Modified: trunk/Master/texmf-dist/web2c/texmf.cnf
===================================================================
--- trunk/Master/texmf-dist/web2c/texmf.cnf	2023-10-11 20:46:52 UTC (rev 68515)
+++ trunk/Master/texmf-dist/web2c/texmf.cnf	2023-10-11 20:52:09 UTC (rev 68516)
@@ -653,6 +653,8 @@
 gregorio,\
 kpsewhich,\
 makeindex,\
+memoize-extract.pl,\
+memoize-extract.py,\
 repstopdf,\
 r-mpost,\
 texosquery-jre8,\