Changes:
- pkg audit now accepts vuln.xml with multiple package names
- Prefer SONAME instead of filename for library provides
- Do not require dependencies that are self provided
- pkg upgrade can now have a name in argument to only upgrade a given package and its dependencies
- Lots of bug fixes