CVS commit: pkgsrc/devel/py-dulwich

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sun Aug  9 05:54:36 UTC 2026

Modified Files:
        pkgsrc/devel/py-dulwich: Makefile distinfo

Log Message:
py-dulwich: updated to 1.2.12

1.2.12  2026-07-19

* Fix ``Bundle.store_objects()`` silently dropping every OFS_DELTA/REF_DELTA
  object in the bundle's pack instead of resolving it, leaving the target
  object store missing most objects with no error raised. Delta resolution
  now goes through ``PackInflater``, matching how packs are ingested
  elsewhere in the object store code.

* SECURITY: Refuse to write a checkout entry whose leading path resolves
  through a symlink. ``build_index_from_tree`` (used by ``reset_index`` and
  thus by ``clone``/``checkout``) materialized a tree in sorted order without
  checking leading components, so a tree pairing a symlink ``link`` with a
  descendant ``link/foo`` wrote ``foo`` through the link to an arbitrary
  absolute path. The same ``verify_leading_dirs`` guard already used by
  porcelain and stash is now applied here.


To generate a diff of this commit:
cvs rdiff -u -r1.86 -r1.87 pkgsrc/devel/py-dulwich/Makefile
cvs rdiff -u -r1.81 -r1.82 pkgsrc/devel/py-dulwich/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-dulwich/Makefile
diff -u pkgsrc/devel/py-dulwich/Makefile:1.86 pkgsrc/devel/py-dulwich/Makefile:1.87
--- pkgsrc/devel/py-dulwich/Makefile:1.86       Fri Jul 17 06:42:31 2026
+++ pkgsrc/devel/py-dulwich/Makefile    Sun Aug  9 05:54:35 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.86 2026/07/17 06:42:31 adam Exp $
+# $NetBSD: Makefile,v 1.87 2026/08/09 05:54:35 adam Exp $
 
-DISTNAME=      dulwich-1.2.11
+DISTNAME=      dulwich-1.2.12
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=d/dulwich/}

Index: pkgsrc/devel/py-dulwich/distinfo
diff -u pkgsrc/devel/py-dulwich/distinfo:1.81 pkgsrc/devel/py-dulwich/distinfo:1.82
--- pkgsrc/devel/py-dulwich/distinfo:1.81       Fri Jul 17 06:42:31 2026
+++ pkgsrc/devel/py-dulwich/distinfo    Sun Aug  9 05:54:35 2026
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.81 2026/07/17 06:42:31 adam Exp $
+$NetBSD: distinfo,v 1.82 2026/08/09 05:54:35 adam Exp $
 
 BLAKE2s (bstr-1.12.3.crate) = 147f1dc0e32ca9e25fc4eb8638b10a6a4683f890145057a982bf4ac718f30376
 SHA512 (bstr-1.12.3.crate) = 5093e7fc678c31684468d7b779a6f129db6b3d87fe7e05b86950ff1ee1afdf1bf6ae2586144667c8ee798de37f5fd089be0f7318401565484fbd7de07f7c0330
 Size (bstr-1.12.3.crate) = 355150 bytes
-BLAKE2s (dulwich-1.2.11.tar.gz) = 8318cf3167b8db9320ce01ca83eb66723dcd5f8aeeaed78cb097940546905d3e
-SHA512 (dulwich-1.2.11.tar.gz) = a2e87b4ac5dd5917a151051e2aedcefbbf12d6be0e3d1a7faf3966137870aa41abffb82359a61825a3c55d64328c923fa8c1fc7d1b30e45581f10b4ada40bd5c
-Size (dulwich-1.2.11.tar.gz) = 1320432 bytes
+BLAKE2s (dulwich-1.2.12.tar.gz) = 0de5252186120a56f858b8548f643ce9ecb74b9f998b3835818605ca6b0aa3e7
+SHA512 (dulwich-1.2.12.tar.gz) = 650d9fd53e702ec1f029cf0a9c7e3d0b6e9b392353e431676d6dd633311f8d665800ebf183bc7a0a2501c27d53d91a5f1e7948b63a959d784e7d4a21eeb33854
+Size (dulwich-1.2.12.tar.gz) = 1323805 bytes
 BLAKE2s (heck-0.5.0.crate) = 0bc71a5746c9d1e7c913d096fb68f1d422464744e18adc592540b291882f5660
 SHA512 (heck-0.5.0.crate) = f044fc9c3d22466629fd8f772ec0555350fd611c0cfadca51d99a3d2f10e155f77c1091916c8a95a6b9b499f366c2e99a5fbf45b010f988bfb9b2501bf9f6a76
 Size (heck-0.5.0.crate) = 11517 bytes