main/libpng: upgrade to 1.6.37

- Add secfixes
  CVE-2019-7317
  CVE-2018-14048
  CVE-2018-14550
- Remove pkg-config detected depends_dev
- Split $pkgname-static

fixes #10362

main/libpng/APKBUILD

 # Contributor: Carlo Landmeter <clandmeter@gmail.com>
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=libpng
-pkgver=1.6.35
+pkgver=1.6.37
 pkgrel=0
 pkgdesc="Portable Network Graphics library"
 url="http://www.libpng.org"
 arch="all"
 license="Libpng"
-depends=""
-depends_dev="zlib-dev"
-makedepends="$depends_dev gawk autoconf automake libtool"
-subpackages="$pkgname-doc $pkgname-dev $pkgname-utils"
+makedepends="zlib-dev gawk autoconf automake libtool"
+subpackages="$pkgname-doc $pkgname-static $pkgname-dev $pkgname-utils"
 source="https://downloads.sourceforge.net/libpng/$pkgname-$pkgver.tar.gz
 	https://downloads.sourceforge.net/sourceforge/libpng-apng/$pkgname-$pkgver-apng.patch.gz
 	libpng-fix-arm-neon.patch
 	"
 builddir="$srcdir/$pkgname-$pkgver"
 
+# secfixes:
+#   1.6.37-r0:
+#     - CVE-2019-7317
+#     - CVE-2018-14048
+#     - CVE-2018-14550
+
 prepare() {
 	cd "$builddir"
 	gunzip -c "$srcdir"/$pkgname-$pkgver-apng.patch.gz | patch -p1
@@ -54,6 +58,14 @@ utils() {
 	mv "$pkgdir"/usr/bin "$subpkgdir"/usr
 }
 
-sha512sums="e4312a4b33e02ad975864d8f1b0c29427625257983962ddd043f258643c18ddcb15a118405282f04d1310817e454a95111e2d4569de494d01d649c7171fd3127  libpng-1.6.35.tar.gz
-fe02147399a3cf3bf86d12589f876cf685fd5edf140d0e8b92f58fc6f113f8b2fce9ab9c19d5b3c8bff381d7e657faa6a2c6b1b6640472c2f1b59dedc598ef52  libpng-1.6.35-apng.patch.gz
+static() {
+	depends=""
+	pkgdesc="$pkgdesc (static library)"
+
+	mkdir -p "$subpkgdir"/usr/lib
+	mv "$pkgdir"/usr/lib/*.a "$subpkgdir"/usr/lib
+}
+
+sha512sums="2ce2b855af307ca92a6e053f521f5d262c36eb836b4810cb53c809aa3ea2dcc08f834aee0ffd66137768a54397e28e92804534a74abb6fc9f6f3127f14c9c338  libpng-1.6.37.tar.gz
+226adcb3a8c60f2267fe2976ab531329ae43c2603dab4d0cf8f16217d64069936b879f3d6516b75d259c47d6f5c5b1f24f887602206c8e46abde0fb7f5c7946b  libpng-1.6.37-apng.patch.gz
 e3fae918f14bc34e7c126892f69527c6e1b4d72593835ece839d9a28cff55a886b2030f877cf9e29b2c97abf2e47bbb5ba54584828edd2a841c2556f330b9c7e  libpng-fix-arm-neon.patch"