CVS commit: pkgsrc/www/py-waitress

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Feb  5 13:28:16 UTC 2025

Modified Files:
        pkgsrc/www/py-waitress: Makefile distinfo

Log Message:
py-waitress: updated to 3.0.2

3.0.2 (2024-11-16)

Security

- When using Waitress to process trusted proxy headers, Waitress will now
  update the headers to drop any untrusted values, thereby making sure that
  WSGI apps only get trusted and validated values that Waitress itself used to
  update the environ. See https://github.com/Pylons/waitress/pull/452 and
  https://github.com/Pylons/waitress/issues/451

3.0.1 (2024-10-28)

Backward Incompatibilities

- Python 3.8 is no longer supported.
  See https://github.com/Pylons/waitress/pull/445.

Features

- Added support for Python 3.13.
  See https://github.com/Pylons/waitress/pull/445.

Security

- Fix a bug that would lead to Waitress busy looping on select() on a half-open
  socket due to a race condition that existed when creating a new HTTPChannel.
  See https://github.com/Pylons/waitress/pull/435,
  https://github.com/Pylons/waitress/issues/418 and
  https://github.com/Pylons/waitress/security/advisories/GHSA-3f84-rpwh-47g6

  With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and
  helping track this down.

- No longer strip the header values before passing them to the WSGI environ.
  See https://github.com/Pylons/waitress/pull/434 and
  https://github.com/Pylons/waitress/issues/432

- Fix a race condition in Waitress when `channel_request_lookahead` is enabled
  that could lead to HTTP request smuggling.


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/py-waitress/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/www/py-waitress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-waitress/Makefile
diff -u pkgsrc/www/py-waitress/Makefile:1.16 pkgsrc/www/py-waitress/Makefile:1.17
--- pkgsrc/www/py-waitress/Makefile:1.16        Mon Nov 11 07:29:29 2024
+++ pkgsrc/www/py-waitress/Makefile     Wed Feb  5 13:28:15 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.16 2024/11/11 07:29:29 wiz Exp $
+# $NetBSD: Makefile,v 1.17 2025/02/05 13:28:15 adam Exp $
 
-DISTNAME=      waitress-3.0.0
+DISTNAME=      waitress-3.0.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=w/waitress/}
@@ -15,8 +15,6 @@ TEST_DEPENDS+=        ${PYPKGPREFIX}-test-cov-[
 
 USE_LANGUAGES= # none
 
-PYTHON_VERSIONS_INCOMPATIBLE=  27
-
 post-install:
        cd ${DESTDIR}${PREFIX}/bin && \
        ${MV} waitress-serve waitress-serve-${PYVERSSUFFIX} || ${TRUE}

Index: pkgsrc/www/py-waitress/distinfo
diff -u pkgsrc/www/py-waitress/distinfo:1.13 pkgsrc/www/py-waitress/distinfo:1.14
--- pkgsrc/www/py-waitress/distinfo:1.13        Thu Jun 13 07:33:57 2024
+++ pkgsrc/www/py-waitress/distinfo     Wed Feb  5 13:28:15 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.13 2024/06/13 07:33:57 adam Exp $
+$NetBSD: distinfo,v 1.14 2025/02/05 13:28:15 adam Exp $
 
-BLAKE2s (waitress-3.0.0.tar.gz) = 3c87a9bf10836977cedf674887057649f8c29fa6f8258d2bb93cda26c083fc07
-SHA512 (waitress-3.0.0.tar.gz) = 8b391eb194fce32fd78c1a20cd1afe8caf20e7e0c622e4be2b1ec7d3831cb5a607cda0637d08dcd3a55f2e8c84817abdad4636bf2ca260b12a774dcfa68b9176
-Size (waitress-3.0.0.tar.gz) = 179393 bytes
+BLAKE2s (waitress-3.0.2.tar.gz) = bf2081492941990a2b37ccd808ada1c28b847571aa1904094eb193c43821e219
+SHA512 (waitress-3.0.2.tar.gz) = f225447b936e4742cf6f0e45b72cc2e33c06ff609c9896fc226de23b9c7ba64140914e3525f57c901617c0a49df3052fe5acbd8ec46f9557832c383ab9d4a483
+Size (waitress-3.0.2.tar.gz) = 179901 bytes