nginx-mainline, nginx-stable: add brotli dynamic module

Add ngx_brotli as a build-time dependency and emit two new dynamic
module subpackages (nginx-{mainline,stable}-mod-http_brotli_filter
and -static) via the existing range: modules loop.

The ngx_brotli sources are consumed from /usr/src/ngx_brotli
(provided by the new ngx_brotli source-only package) rather than
fetched inline, matching the pattern used by njs consuming
nginx-src-main. This structure lets nginx-mainline, nginx-stable,
and downstream consumers (e.g. ingress-nginx-controller) share the
same ngx_brotli pin via a single package.

Revives #8771, addressing @rawlingsj's review feedback that
suggested packaging ngx_brotli separately.

Refs: #8771

Author: akirk-gitguardian

nginx-mainline.yaml

@@ -3,7 +3,7 @@ package:
   # MAINLINE VERSIONS MUST USE ODD MINOR VERSIONS (e.g., 1.27.x, 1.29.x)
   # Must also bump njs at the same time
   version: "1.29.8"
-  epoch: 1
+  epoch: 2
   # HEY YOU! If you update/bump this package you NEED to go and update the equivilent nginx-otel package
   description: HTTP and reverse proxy server (mainline version)
   copyright:
@@ -42,6 +42,7 @@ environment:
       - libxml2-dev
       - libxslt-dev
       - luajit-dev
+      - ngx_brotli
       - openssl-hardened-dev
       - pcre2-dev
       - perl-dev
@@ -58,6 +59,8 @@ var-transforms:
 data:
   - name: modules
     items:
+      http_brotli_filter: "10"
+      http_brotli_static: "10"
       http_geoip: "10"
       http_image_filter: "10"
       http_perl: "10"
@@ -139,7 +142,8 @@ pipeline:
           --with-stream_ssl_module \
           --with-stream_realip_module \
           --with-stream_geoip_module=dynamic \
-          --with-stream_ssl_preread_module
+          --with-stream_ssl_preread_module \
+          --add-dynamic-module=/usr/src/ngx_brotli
 
   - working-directory: nginx-mainline
     runs: |

nginx-stable.yaml

@@ -2,7 +2,7 @@ package:
   name: nginx-stable
   # STABLE VERSIONS MUST USE EVEN MINOR VERSIONS (e.g., 1.26.x, 1.28.x)
   version: "1.28.3"
-  epoch: 1
+  epoch: 2
   # HEY YOU! If you update/bump this package you NEED to go and update the equivilent nginx-otel package
   description: HTTP and reverse proxy server (stable version)
   copyright:
@@ -38,6 +38,7 @@ environment:
       - libxml2-dev
       - libxslt-dev
       - luajit-dev
+      - ngx_brotli
       - openssl-hardened-dev
       - pcre-dev
       - perl-dev
@@ -54,6 +55,8 @@ var-transforms:
 data:
   - name: modules
     items:
+      http_brotli_filter: "10"
+      http_brotli_static: "10"
       http_geoip: "10"
       http_image_filter: "10"
       http_perl: "10"
@@ -138,7 +141,8 @@ pipeline:
           --with-stream_ssl_module \
           --with-stream_realip_module \
           --with-stream_geoip_module=dynamic \
-          --with-stream_ssl_preread_module
+          --with-stream_ssl_preread_module \
+          --add-dynamic-module=/usr/src/ngx_brotli
 
   - working-directory: nginx-stable
     runs: |