package/oniguruma: security bump to version 6.9.4

- Retrieve official tarball to drop autoreconf
- Fixed CVE-2019-19012
- Fixed CVE-2019-19203 (Does not affect UTF-8, UTF-16 and UTF-32
  encodings)
- Fixed CVE-2019-19204 (Affects only PosixBasic, Emacs and Grep
  syntaxes)
- Fixed CVE-2019-19246

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

package/oniguruma/oniguruma.hash

@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  dc6dec742941e24b761cea1b9a2f12e750879107ae69fd80ae1046459d4fb1db  oniguruma-6.9.3.tar.gz
+sha256  4669d22ff7e0992a7e93e116161cac9c0949cd8960d1c562982026726f0e6d53  onig-6.9.4.tar.gz
 sha256  ae266a1ad1c2ef50baf14a1a2993e926cd46d09c6cc8b0b3a8498e44da2746b8  COPYING

package/oniguruma/oniguruma.mk

@@ -4,12 +4,12 @@
 #
 ################################################################################
 
-ONIGURUMA_VERSION = 6.9.3
-ONIGURUMA_SITE = $(call github,kkos,oniguruma,v$(ONIGURUMA_VERSION))
+ONIGURUMA_VERSION = 6.9.4
+ONIGURUMA_SITE = \
+	https://github.com/kkos/oniguruma/releases/download/v$(ONIGURUMA_VERSION)
+ONIGURUMA_SOURCE = onig-$(ONIGURUMA_VERSION).tar.gz
 ONIGURUMA_LICENSE = BSD-2-Clause
 ONIGURUMA_LICENSE_FILES = COPYING
-# From git
-ONIGURUMA_AUTORECONF = YES
 ONIGURUMA_INSTALL_STAGING = YES
 
 $(eval $(autotools-package))