The -s flag assures that nothing can be installed to user site-packages
but doesn't keep ensurepip from looking there for Pip.
If Pip is installed in the user site-packages directory, pip won't be installed
for the newly built python -- and its shim won't be created.
-I makes the build install Pip in any case.
The user site-packages installation will override it --
but we'll have the shim at least.

Guthub have recently preinstalled x64 Homebrew OpenSSL to stock MacOS runners. This has caused FreeBSD OpenSSL detection logic to erroneously trigger when running FreeBSD tests in MacOS because their paths happened to coincide.

Replaced checking a specific path with checking with pkg.

* Cleanup mocks logic
* Add test for `:latest`

Without rpath, python would link up to the system's libpython

Surprisingly, CPython doesn't search these with pkg-config
This is fixed upstream in 3.12.0a1

Likely in Ubuntu where it's only available as a snap

It was moved to `pyenv-install`

CPython 3.11+ dropped support for --with-tcl-tk-*
in favor of pure pkgconfig

Since 3.12, CPython can provide debug symbols in
Apple's nonstandard way, "dSYM bundles"

Support frozen builtin modules e.g. upip

Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

In Linux, it's not the primary source of packages and
cannot be used without build flag adjustments
thus has caused build failures.

`which` has been deprecated in Debian's debianutils 5.0+
They suggest using `type` and `command` as replacements:
3a8dd10b45 ,
610a65c6ef

This is needed to find other Python deps (e.g. libintl) in Homebrew if it has
nonstandard prefix (e.g. in Apple M1)

* Re-allow to search Homebrew for zlib everywhere

Don't override a user-supplied value

Link to the active version like other Homebrew deps --
this won't break when another binary-compatible version is installed.
Use a discovery method that doesn't break when other versions are present alongside.

* feat(python-build): allow tcl-tk as argument or default to homebrew
* refactor(python-build): detect tcl-tk-libs from confugre_opts_arr

The $(type -p | head -1) construct expects to always get a path, so need to ignore such aliases with -P

Closes https://github.com/pyenv/pyenv/issues/1662

Only test the permission bit that we're setting

fixes #1219, #1333

This reverts commit 070e1c859fb2584c3dbe0a6fbe58cbc80938654e, reversing
changes made to 3faeda67bb.

All scripts in libexec/ (excluding pyenv) are called through pyenv,
therefore the shebang lines are not necessary. On some systems this
provides a measurable increase in performance of the shell prompt.

Related to pyenv/pyenv-virtualenv#259

For now this just builds the latest CPython, but it can be
extended to include other versions.

Skip with `[skip build]` in commit message.