CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Oct  8 05:55:24 UTC 2025

Modified Files:
        pkgsrc/lang/py313-html-docs: Makefile PLIST distinfo
        pkgsrc/lang/python313: PLIST dist.mk distinfo

Log Message:
python313 py313-html-docs: updated to 3.13.8

3.13.8

Python 3.13.8

macOS

gh-124111: Update macOS installer to use Tcl/Tk 8.6.17.
gh-139573: Updated bundled version of OpenSSL to 3.0.18.

Windows

gh-139573: Updated bundled version of OpenSSL to 3.0.18.
gh-138896: Fix error installing C runtime on non-updated Windows machines

Tools/Demos

gh-139330: SBOM generation tool didn’t cross-check the version and checksum values against the Modules/expat/refresh.sh script, leading to the values becoming out-of-date during routine updates.
gh-137873: The iOS test runner has been simplified, resolving some issues that have been observed using the runner in GitHub Actions and Azure Pipelines test environments.

Tests

gh-139208: Fix regrtest --fast-ci --verbose: don’t ignore the --verbose option anymore. Patch by Victor Stinner.
Security
gh-139400: xml.parsers.expat: Make sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by ExternalEntityParserCreate(). Patch by 
Sebastian Pipping.
gh-139283: sqlite3: correctly handle maximum number of rows to fetch in Cursor.fetchmany and reject negative values for Cursor.arraysize. Patch by Bénédikt Tran.
gh-135661: Fix CDATA section parsing in html.parser.HTMLParser according to the HTML5 standard: ] ]> and ]] > no longer end the CDATA section. Add private method _set_support_cdata() which can be 
used to specify how to parse <[CDATA[ — as a CDATA section in foreign content (SVG or MathML) or as a bogus comment in the HTML namespace.

Library

gh-139312: Upgrade bundled libexpat to 2.7.3
gh-139289: Do a real lazy-import on rlcompleter in pdb and restore the existing completer after importing rlcompleter.
gh-139210: Fix use-after-free when reporting unknown event in xml.etree.ElementTree.iterparse(). Patch by Ken Jin.
gh-138860: Lazy import rlcompleter in pdb to avoid deadlock in subprocess.
gh-112729: Fix crash when calling _interpreters.create when the process is out of memory.
gh-139076: Fix a bug in the pydoc module that was hiding functions in a Python module if they were implemented in an extension module and the module did not have __all__.
gh-138998: Update bundled libexpat to 2.7.2
gh-130567: Fix possible crash in locale.strxfrm() due to a platform bug on macOS.
gh-138779: Support device numbers larger than 2**63-1 for the st_rdev field of the os.stat_result structure.
gh-128636: Fix crash in PyREPL when os.environ is overwritten with an invalid value for mac
gh-88375: Fix normalization of the robots.txt rules and URLs in the urllib.robotparser module. No longer ignore trailing ?. Distinguish raw special characters ?, = and & from the percent-encoded ones.
gh-138515: email is added to Emscripten build.
gh-111788: Fix parsing errors in the urllib.robotparser module. Don’t fail trying to parse weird paths. Don’t fail trying to decode non-UTF-8 robots.txt files.
gh-138432: zoneinfo.reset_tzpath() will now convert any os.PathLike objects it receives into strings before adding them to TZPATH. It will raise TypeError if anything other than a string is found 
after this conversion. If given an os.PathLike object that represents a relative path, it will now raise ValueError instead of TypeError, and present a more informative error message.
gh-138008: Fix segmentation faults in the ctypes module due to invalid argtypes. Patch by Dung Nguyen.
gh-60462: Fix locale.strxfrm() on Solaris (and possibly other platforms).
gh-138204: Forbid expansion of shared anonymous memory maps on Linux, which caused a bus error.
gh-138010: Fix an issue where defining a class with a @warnings.deprecated-decorated base class may not invoke the correct __init_subclass__() method in cases involving multiple inheritance. Patch by 
Brian Schubert.
gh-138133: Prevent infinite traceback loop when sending CTRL^C to Python through strace.
gh-134869: Fix an issue where pressing Ctrl+C during tab completion in the REPL would leave the autocompletion menu in a corrupted state.
gh-137317: inspect.signature() now correctly handles classes that use a descriptor on a wrapped __init__() or __new__() method. Contributed by Yongyu Yan.
gh-137754: Fix import of the zoneinfo module if the C implementation of the datetime module is not available.
gh-137490: Handle ECANCELED in the same way as EINTR in signal.sigwaitinfo() on NetBSD.
gh-137477: Fix inspect.getblock(), inspect.getsourcelines() and inspect.getsource() for generator expressions.
gh-137017: Fix threading.Thread.is_alive to remain True until the underlying OS thread is fully cleaned up. This avoids false negatives in edge cases involving thread monitoring or premature 
threading.Thread.is_alive calls.
gh-136134: SMTP.auth_cram_md5() now raises an SMTPException instead of a ValueError if Python has been built without MD5 support. In particular, SMTP clients will not attempt to use this method even 
if the remote server is assumed to support it. Patch by Bénédikt Tran.
gh-136134: IMAP4.login_cram_md5 now raises an IMAP4.error if CRAM-MD5 authentication is not supported. Patch by Bénédikt Tran.
gh-135386: Fix opening a dbm.sqlite3 database for reading from read-only file or directory.
gh-126631: Fix multiprocessing forkserver bug which prevented __main__ from being preloaded.
gh-123085: In a bare call to importlib.resources.files(), ensure the caller’s frame is properly detected when importlib.resources is itself available as a compiled module only (no source).
gh-118981: Fix potential hang in multiprocessing.popen_spawn_posix that can happen when the child proc dies early by closing the child fds right away.
gh-78319: UTF8 support for the IMAP APPEND command has been made RFC compliant.
bpo-38735: Fix failure when importing a module from the root directory on unix-like platforms with sys.pycache_prefix set.
bpo-41839: Allow negative priority values from os.sched_get_priority_min() and os.sched_get_priority_max() functions.

Core and Builtins

gh-134466: Don’t run PyREPL in a degraded environment where setting termios attributes is not allowed.
gh-71810: Raise OverflowError for (-1).to_bytes() for signed conversions when bytes count is zero. Patch by Sergey B Kirpichev.
gh-105487: Remove non-existent __copy__(), __deepcopy__(), and __bases__ from the __dir__() entries of types.GenericAlias.
gh-134163: Fix a hang when the process is out of memory inside an exception handler.
gh-138479: Fix a crash when a generic object’s __typing_subst__ returns an object that isn’t a tuple.
gh-137576: Fix for incorrect source code being shown in tracebacks from the Basic REPL when PYTHONSTARTUP is given. Patch by Adam Hartz.
gh-132744: Certain calls now check for runaway recursion and respect the system recursion limit.

C API

gh-87135: Attempting to acquire the GIL after runtime finalization has begun in a different thread now causes the thread to hang rather than terminate, which avoids potential crashes or memory 
corruption caused by attempting to terminate a thread that is running code not specifically designed to support termination. In most cases this hanging is harmless since the process will soon exit 
anyway.

While not officially marked deprecated until 3.14, PyThread_exit_thread is no longer called internally and remains solely for interface compatibility. Its behavior is inconsistent across platforms, 
and it can only be used safely in the unlikely case that every function in the entire call stack has been designed to support the platform-dependent termination mechanism. It is recommended that 
users of this function change their design to not require thread termination. In the unlikely case that thread termination is needed and can be done safely, users may migrate to calling 
platform-specific APIs such as pthread_exit (POSIX) or _endthreadex (Windows) directly.

Build

gh-135734: Python can correctly be configured and built with ./configure --enable-optimizations --disable-test-modules. Previously, the profile data generation step failed due to PGO tests where 
immortalization couldn’t be properly suppressed. Patch by Bénédikt Tran.


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/py313-html-docs/Makefile \
    pkgsrc/lang/py313-html-docs/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/py313-html-docs/PLIST
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/python313/PLIST
cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/python313/dist.mk
cvs rdiff -u -r1.12 -r1.13 pkgsrc/lang/python313/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py313-html-docs/Makefile
diff -u pkgsrc/lang/py313-html-docs/Makefile:1.8 pkgsrc/lang/py313-html-docs/Makefile:1.9
--- pkgsrc/lang/py313-html-docs/Makefile:1.8    Fri Aug 15 06:44:41 2025
+++ pkgsrc/lang/py313-html-docs/Makefile        Wed Oct  8 05:55:24 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.8 2025/08/15 06:44:41 adam Exp $
+# $NetBSD: Makefile,v 1.9 2025/10/08 05:55:24 adam Exp $
 
-VERS=          3.13.7
+VERS=          3.13.8
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py313-html-docs-${VERS}
 CATEGORIES=    lang python
Index: pkgsrc/lang/py313-html-docs/distinfo
diff -u pkgsrc/lang/py313-html-docs/distinfo:1.8 pkgsrc/lang/py313-html-docs/distinfo:1.9
--- pkgsrc/lang/py313-html-docs/distinfo:1.8    Fri Aug 15 06:44:41 2025
+++ pkgsrc/lang/py313-html-docs/distinfo        Wed Oct  8 05:55:24 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.8 2025/08/15 06:44:41 adam Exp $
+$NetBSD: distinfo,v 1.9 2025/10/08 05:55:24 adam Exp $
 
-BLAKE2s (python-3.13.7-docs-html.tar.bz2) = 8f8004104c03864680750787cd30f367ce68bb7d611fba6fcd4ac6bb8e8a8acb
-SHA512 (python-3.13.7-docs-html.tar.bz2) = 724e1cd7cc64db7efcd872beeded4ba8b9b492ae2706de10372e7fc625fe63fc06dfac5dcbe742e9c8c7643f4ba5bbcadd5178e31b87cb60262cf286aa889cb8
-Size (python-3.13.7-docs-html.tar.bz2) = 10426777 bytes
+BLAKE2s (python-3.13.8-docs-html.tar.bz2) = ab7c34c364c2eafe3775d2fa7ef77e857aebedb4875b8998f2eb31c8f9be1a6f
+SHA512 (python-3.13.8-docs-html.tar.bz2) = 311cbf10dfe4c81546a17727423f114566055021c63393f58aafc035b4b2b34cf8f861d2a4c3046756391f1e9c204915f673254b010b405c19a764c4ead0ce14
+Size (python-3.13.8-docs-html.tar.bz2) = 10368502 bytes

Index: pkgsrc/lang/py313-html-docs/PLIST
diff -u pkgsrc/lang/py313-html-docs/PLIST:1.5 pkgsrc/lang/py313-html-docs/PLIST:1.6
--- pkgsrc/lang/py313-html-docs/PLIST:1.5       Fri Aug 15 06:44:41 2025
+++ pkgsrc/lang/py313-html-docs/PLIST   Wed Oct  8 05:55:24 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2025/08/15 06:44:41 adam Exp $
+@comment $NetBSD: PLIST,v 1.6 2025/10/08 05:55:24 adam Exp $
 share/doc/python3.13/.buildinfo
 share/doc/python3.13/404.html
 share/doc/python3.13/_downloads/6dc1f3f4f0e6ca13cb42ddf4d6cbc8af/tzinfo_examples.py
@@ -98,6 +98,7 @@ share/doc/python3.13/_sources/deprecatio
 share/doc/python3.13/_sources/deprecations/pending-removal-in-3.14.rst.txt
 share/doc/python3.13/_sources/deprecations/pending-removal-in-3.15.rst.txt
 share/doc/python3.13/_sources/deprecations/pending-removal-in-3.16.rst.txt
+share/doc/python3.13/_sources/deprecations/pending-removal-in-3.17.rst.txt
 share/doc/python3.13/_sources/deprecations/pending-removal-in-future.rst.txt
 share/doc/python3.13/_sources/distributing/index.rst.txt
 share/doc/python3.13/_sources/extending/building.rst.txt
@@ -543,7 +544,6 @@ share/doc/python3.13/_static/minus.png
 share/doc/python3.13/_static/og-image.png
 share/doc/python3.13/_static/opensearch.xml
 share/doc/python3.13/_static/plus.png
-share/doc/python3.13/_static/py.png
 share/doc/python3.13/_static/py.svg
 share/doc/python3.13/_static/pydoctheme.css
 share/doc/python3.13/_static/pydoctheme_dark.css
@@ -635,6 +635,7 @@ share/doc/python3.13/deprecations/pendin
 share/doc/python3.13/deprecations/pending-removal-in-3.14.html
 share/doc/python3.13/deprecations/pending-removal-in-3.15.html
 share/doc/python3.13/deprecations/pending-removal-in-3.16.html
+share/doc/python3.13/deprecations/pending-removal-in-3.17.html
 share/doc/python3.13/deprecations/pending-removal-in-future.html
 share/doc/python3.13/distributing/index.html
 share/doc/python3.13/download.html

Index: pkgsrc/lang/python313/PLIST
diff -u pkgsrc/lang/python313/PLIST:1.9 pkgsrc/lang/python313/PLIST:1.10
--- pkgsrc/lang/python313/PLIST:1.9     Fri Aug  8 11:03:30 2025
+++ pkgsrc/lang/python313/PLIST Wed Oct  8 05:55:24 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2025/08/08 11:03:30 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.10 2025/10/08 05:55:24 adam Exp $
 bin/idle${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -2586,6 +2586,9 @@ lib/python${PY_VER_SUFFIX}/test/mp_prelo
 lib/python${PY_VER_SUFFIX}/test/mp_preload_flush.py
 lib/python${PY_VER_SUFFIX}/test/mp_preload_flush.pyc
 lib/python${PY_VER_SUFFIX}/test/mp_preload_flush.pyo
+lib/python${PY_VER_SUFFIX}/test/mp_preload_main.py
+lib/python${PY_VER_SUFFIX}/test/mp_preload_main.pyc
+lib/python${PY_VER_SUFFIX}/test/mp_preload_main.pyo
 lib/python${PY_VER_SUFFIX}/test/multibytecodec_support.py
 lib/python${PY_VER_SUFFIX}/test/multibytecodec_support.pyc
 lib/python${PY_VER_SUFFIX}/test/multibytecodec_support.pyo
@@ -4792,6 +4795,9 @@ lib/python${PY_VER_SUFFIX}/test/test_pyr
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/__main__.py
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/__main__.pyc
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/__main__.pyo
+lib/python${PY_VER_SUFFIX}/test/test_pyrepl/eio_test_script.py
+lib/python${PY_VER_SUFFIX}/test/test_pyrepl/eio_test_script.pyc
+lib/python${PY_VER_SUFFIX}/test/test_pyrepl/eio_test_script.pyo
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/support.py
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/support.pyc
 lib/python${PY_VER_SUFFIX}/test/test_pyrepl/support.pyo

Index: pkgsrc/lang/python313/dist.mk
diff -u pkgsrc/lang/python313/dist.mk:1.8 pkgsrc/lang/python313/dist.mk:1.9
--- pkgsrc/lang/python313/dist.mk:1.8   Fri Aug 15 06:44:41 2025
+++ pkgsrc/lang/python313/dist.mk       Wed Oct  8 05:55:24 2025
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.8 2025/08/15 06:44:41 adam Exp $
+# $NetBSD: dist.mk,v 1.9 2025/10/08 05:55:24 adam Exp $
 
-PY_DISTVERSION=        3.13.7
+PY_DISTVERSION=        3.13.8
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python313/distinfo

Index: pkgsrc/lang/python313/distinfo
diff -u pkgsrc/lang/python313/distinfo:1.12 pkgsrc/lang/python313/distinfo:1.13
--- pkgsrc/lang/python313/distinfo:1.12 Fri Aug 15 06:44:41 2025
+++ pkgsrc/lang/python313/distinfo      Wed Oct  8 05:55:24 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.12 2025/08/15 06:44:41 adam Exp $
+$NetBSD: distinfo,v 1.13 2025/10/08 05:55:24 adam Exp $
 
-BLAKE2s (Python-3.13.7.tar.xz) = 3d16617d93957550bf6640c1ec911562480e3189f99b0042992a8386f203b22a
-SHA512 (Python-3.13.7.tar.xz) = 73fa04db860e8b98c204f84d403598fcb802b19bfc8f2675df2fddb6b153b1643daf081746a043f57c8fa71b950a439581aa5204c2bfadb8cfd8864ca4f42f0d
-Size (Python-3.13.7.tar.xz) = 22769492 bytes
+BLAKE2s (Python-3.13.8.tar.xz) = 331d01f1f6c95932d77315dd0a906967bf8ecb764ef08d034c164f0ba364b67f
+SHA512 (Python-3.13.8.tar.xz) = 8569959f24083824f6644b839c6ebd587e67fb74b3c5fed9ef44bfbbba46076e98db33a27218b2d44edd15b3b05ae85e94b71491598cbb871d7d43a9d6fa2b84
+Size (Python-3.13.8.tar.xz) = 22681576 bytes
 SHA1 (patch-Include_pymacro.h) = 7611315fefc305a48b4965f2f2b9bee53ae3d987
 SHA1 (patch-Lib_ctypes_util.py) = 3dec1b6b7a36e46cbfa0dfcd71c5e7fac9f60764
 SHA1 (patch-Lib_sysconfig_____init____.py) = 6c151d3dca0367cbb38c1175b9dba894509cf1a4