- Remove BUILD_DEPENDS and RUN_DEPENDS:
- RUN_DEPENDS: BUILD_DEPENDS is sufficient to block unqualified version.
- BUILD_DEPENDS: it's safe to remove BUILD_DEPENDS after nghttp2->libnghttp2 transition because initial version of libnghttp2 is 1.0.0+.
Pointed out by: adamw