8 files changed, 25 insertions, 25 deletions
diff --git a/profiles/Manifest.gz b/profiles/Manifest.gz
index b15a50b43803..3456d1c5e910 100644
--- a/profiles/Manifest.gz
+++ b/profiles/Manifest.gz
diff --git a/profiles/arch/arm/package.use.force b/profiles/arch/arm/package.use.force
index e6ca6de1aefb..12be1ef6aeae 100644
--- a/profiles/arch/arm/package.use.force
+++ b/profiles/arch/arm/package.use.force
@@ -1,6 +1,11 @@
-# Copyright 1999-2021 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# matoro <matoro_gentoo@matoro.tk> (2022-08-31)
+# GHC does not gain native codegen for arm until 9.2.
+# We don't want an unregisterised build, so force LLVM codegen.
+dev-lang/ghc:0/9.0.2 llvm
+
 # Thomas Deutschmann <whissi@gentoo.org> (2021-05-11)
 # Satisfy REQUIRED_USE on arm
 app-emulation/xen debug
diff --git a/profiles/arch/arm64/package.use.force b/profiles/arch/arm64/package.use.force
index 90e884f46c82..4392200bf91a 100644
--- a/profiles/arch/arm64/package.use.force
+++ b/profiles/arch/arm64/package.use.force
@@ -1,6 +1,11 @@
-# Copyright 1999-2021 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# matoro <matoro_gentoo@matoro.tk> (2022-08-31)
+# GHC does not gain native codegen for arm64 until 9.2.
+# We don't want an unregisterised build, so force LLVM codegen.
+dev-lang/ghc:0/9.0.2 llvm
+
 # Michał Górny <mgorny@gentoo.org> (2021-02-19)
 # We have ready-to-use configs here.
 sys-kernel/gentoo-kernel -savedconfig
diff --git a/profiles/features/musl/package.mask b/profiles/features/musl/package.mask
index 6b934461e79c..261d3f023307 100644
--- a/profiles/features/musl/package.mask
+++ b/profiles/features/musl/package.mask
@@ -260,6 +260,7 @@ net-misc/netkit-rsh
 
 # David Seifert <soap@gentoo.org> (2021-02-08)
 # nvidia-drivers only works against glibc.
+dev-libs/optix
 x11-drivers/nvidia-drivers
 
 # Ulrich Müller (2020-03-31)
@@ -285,10 +286,9 @@ app-emulation/dosemu
 sys-libs/glibc
 
 # As of 2021-08-08, >=sys-fs/udev-249-r2 is patched in Gentoo
-# to work on musl.
+# to work on musl, so no need to mask udev.
+# systemd itself fails to build without glibc
 sys-apps/systemd
-
-# systemd sources fail to build without glibc
 sys-boot/systemd-boot
 
 # rust-bin requires a glibc system
diff --git a/profiles/features/selinux/package.use.mask b/profiles/features/selinux/package.use.mask
index 7808e7cb7e8d..dfab82971fbd 100644
--- a/profiles/features/selinux/package.use.mask
+++ b/profiles/features/selinux/package.use.mask
@@ -10,14 +10,9 @@ sys-apps/ipmitool openbmc
 net-analyzer/wireshark sdjournal
 
 # Jason Zaman <perfinion@gentoo.org> (2015-06-27)
-# systemd has no support in the SELinux policy at the moment.
+# systemd has only experimental support in the SELinux policy at the moment.
 # Please see: https://wiki.gentoo.org/wiki/SELinux/FAQ#Can_I_use_SELinux_with_SystemD.3F
-app-emulation/libvirt firewalld
-gnome-base/gdm wayland
-gnome-base/gnome-extra-apps share
-net-firewall/fwknop firewalld
 www-servers/uwsgi uwsgi_plugins_systemd_logger
->=x11-wm/mutter-3.22 wayland
 
 # Brian Dolbec <dolsen@gentoo.org> (2014-09-17)
 # mask pypy for several utilities due to incompatibility with libselinux
diff --git a/profiles/license_groups b/profiles/license_groups
index 2e52fd753e3a..7d2c6419fa84 100644
--- a/profiles/license_groups
+++ b/profiles/license_groups
@@ -73,7 +73,7 @@ BINARY-REDISTRIBUTABLE @FREE Amazon Atmel AVASYS bh-luxi bonnie Broadcom freedis
 
 # License agreements that try to take away your rights. These are more
 # restrictive than "all-rights-reserved" or require explicit approval.
-EULA 2dboy-EULA AMD-GPU-PRO-EULA android AnyDesk-TOS Aseprite-EULA baudline BCS bestcrypt CAPYBARA-EULA Coherent-Graphics ETQW f.lux FAH-EULA-2014 Flightradar24 Gameplay-Group-EULA geekbench genymotion GIMPS GOG-EULA google-chrome Intel-SDP Introversion JoyPixels LOKI-EULA MakeMKV-EULA Microsemi microsoft-edge Microsoft-vscode Mojang ms-teams-pre MTA-0.5 NVIDIA-CUDA OPERA-2018 PAPERS-PLEASE PassMark-EULA PICO-8 Primate-Plunge PUEL Q3AEULA-20000111 QUAKE4 RAR sfpg Sourcetrail SPS Steam supermicro Synology teamspeak3 teamspeak5 TeamViewer THINKTANKS TIK ubiquiti ut2003 ut2003-demo Vivaldi worklog-assistant WPS-EULA zi-labone
+EULA 2dboy-EULA AMD-GPU-PRO-EULA android AnyDesk-TOS Aseprite-EULA baudline BCS bestcrypt CAPYBARA-EULA Coherent-Graphics ETQW f.lux FAH-EULA-2014 Flightradar24 Gameplay-Group-EULA geekbench genymotion GIMPS GOG-EULA google-chrome Intel-SDP Introversion JoyPixels LOKI-EULA MakeMKV-EULA Microsemi microsoft-edge Microsoft-vscode Mojang ms-teams-pre MTA-0.5 NVIDIA-CUDA NVIDIA-SDK OPERA-2018 PAPERS-PLEASE PassMark-EULA PICO-8 Primate-Plunge PUEL Q3AEULA-20000111 QUAKE4 RAR sfpg Sourcetrail SPS Steam supermicro Synology teamspeak3 teamspeak5 TeamViewer THINKTANKS TIK ubiquiti ut2003 ut2003-demo Vivaldi worklog-assistant WPS-EULA zi-labone
 
 # Deprecated license labels, used by repoman and pkgcheck
 #DEPRECATED (currently none)
diff --git a/profiles/package.mask b/profiles/package.mask
index b9fd4ceb4196..04fa0bed4acd 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -49,7 +49,6 @@ dev-python/flask-mail
 dev-python/flask-principal
 dev-python/flask-wtf
 dev-python/mongomock
-dev-python/peewee
 dev-python/pony
 dev-python/pyqrcode
 dev-python/sentinels
@@ -133,6 +132,9 @@ dev-haskell/either
 dev-haskell/filelock
 dev-haskell/filepattern
 dev-haskell/fsnotify
+dev-haskell/genvalidity
+dev-haskell/genvalidity-hspec
+dev-haskell/genvalidity-property
 dev-haskell/ghc-lib-parser
 dev-haskell/ghc-lib-parser-ex
 dev-haskell/githash
@@ -173,6 +175,7 @@ dev-haskell/open-browser
 dev-haskell/openssl-streams
 dev-haskell/optparse-simple
 dev-haskell/pantry
+dev-haskell/path
 dev-haskell/path-io
 dev-haskell/pointed
 dev-haskell/polyparse
@@ -199,6 +202,7 @@ dev-haskell/th-expand-syns
 dev-haskell/th-orphans
 dev-haskell/th-reify-many
 dev-haskell/threads
+dev-haskell/validity
 dev-haskell/vector-builder
 dev-haskell/vector-instances
 dev-haskell/weigh
@@ -314,18 +318,6 @@ dev-qt/qtwebsockets:6
 # Multiple rendering/font issues reported: bug #844115, bug #851141.
 =app-text/ghostscript-gpl-9.56.1
 
-# Marek Szuba <marecki@gentoo.org> (2022-08-01)
-# Suricata-5 has reached end of life upstream. Please switch to major version 6.
-# Removal in 30 days (Bug #)
-<net-analyzer/suricata-6.0.0
-
-# Marek Szuba <marecki@gentoo.org> (2022-07-13)
-# Upstream has switched from CMake to hand-crafted Makefiles (yes, TO them),
-# which have seriously messed up dependency handling and trigger several
-# QA violations in Gentoo. Mask until all of the latter have been resolved
-# and the jumbo patch fixing the former has been thoroughly tested.
->media-gfx/gmic-3.1.0
-
 # Fabian Groffen <grobian@gentoo.org> (2022-07-02)
 # Segfaults handling SPF validations (warn on permerror), like the
 # previous release, better not to trust your important mail to
diff --git a/profiles/use.local.desc b/profiles/use.local.desc
index b89b0d748239..43a0bfd772af 100644
--- a/profiles/use.local.desc
+++ b/profiles/use.local.desc
@@ -1660,6 +1660,7 @@ dev-lang/ghc:elfutils - Enable DWARF-based backtraces using dev-libs/elfutils.
 dev-lang/ghc:ghcbootstrap - Internal: Bootstrap GHC from an existing GHC installation.
 dev-lang/ghc:ghcmakebinary - Internal: Build binary friendly for redistribution.
 dev-lang/ghc:gmp - Use dev-libs/gmp for integer operations (works faster, but an external depend).
+dev-lang/ghc:llvm - Pull in dependencies for the sys-devel/llvm codegen backend.
 dev-lang/ghc:numa - Enable NUMA thread balancing policy using sys-process/numactl.
 dev-lang/gnat-gpl:ada - Build the ADA language (GNAT) frontend
 dev-lang/gnat-gpl:bootstrap - Used to bootstrap gnat-gpl
@@ -2138,6 +2139,7 @@ dev-libs/openssl-compat:sslv3 - Support for the old/insecure SSLv3 protocol -- n
 dev-libs/openssl-compat:tls-compression - Enable support for discouraged TLS compression
 dev-libs/openssl-compat:tls-heartbeat - Enable the Heartbeat Extension in TLS and DTLS
 dev-libs/openssl-compat:weak-ssl-ciphers - Build support for SSL/TLS ciphers that are considered "weak"
+dev-libs/optix:headers-only - Download and install only the header files
 dev-libs/pkcs11-helper:nss - Enable NSS crypto engine
 dev-libs/pocl:accel - Enable the generic hardware accelerator device driver
 dev-libs/pocl:cl20 - Enable reporting OpenCL 2.0 for the CPU device
@@ -4174,6 +4176,7 @@ media-libs/gd:avif - Enable support for the avif format via media-libs/libavif
 media-libs/gd:heif - Enable support for the heif format via media-libs/libheif
 media-libs/gd:webp - Enable support for the webp format
 media-libs/gegl:lensfun - Enable support for media-libs/lensfun.
+media-libs/gegl:sdl2 - Add support for Simple Direct Layer 2.0 (media-libs/libsdl2)
 media-libs/gegl:umfpack - Enable sparse solving via sci-libs/umfpack.
 media-libs/glfw:wayland-only - Enable wayland support and disable X11 support
 media-libs/gmmlib:custom-cflags - Do not override user CFLAGS like -march, -msse and similar with lib defaults. Not tested by upstream.