CVS commit: pkgsrc/devel/py-cbor2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Aug 11 05:42:12 UTC 2026

Modified Files:
        pkgsrc/devel/py-cbor2: Makefile distinfo

Log Message:
py-cbor2: updated to 6.1.4

6.1.4 (2026-08-01)

- Fixed :class:`frozendict` deriving its hash from its keys and its values as two independent
  sets, so that frozendicts holding the same keys and the same values all collided regardless of
  how the two were paired; since the decoder builds a frozendict for every map in an immutable
  position, a payload keyed by such maps decoded in quadratic time
- Fixed the encoder not registering :class:`bytearray` values in the string reference namespace,
  unlike :class:`bytes` and :class:`str`; since the decoder registers every byte string it reads, a
  single ``bytearray`` desynchronised the namespace and made subsequent string references resolve
  to the wrong value
- Fixed the decoder silently accepting an indefinite-length map whose break marker arrives after a
  key with no value, dropping that trailing key and returning a truncated map instead of rejecting
  the ill-formed input
- Fixed the decoder accepting a non-byte-string payload for a positive or negative bignum (tags 2
  and 3). ``int.from_bytes()`` also accepts an array (or a map, whose keys it iterates), so a tag
  wrapping one of those was coerced into an integer instead of being rejected as malformed


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/py-cbor2/Makefile
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/py-cbor2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-cbor2/Makefile
diff -u pkgsrc/devel/py-cbor2/Makefile:1.20 pkgsrc/devel/py-cbor2/Makefile:1.21
--- pkgsrc/devel/py-cbor2/Makefile:1.20 Sun Jul  5 10:15:51 2026
+++ pkgsrc/devel/py-cbor2/Makefile      Tue Aug 11 05:42:12 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.20 2026/07/05 10:15:51 adam Exp $
+# $NetBSD: Makefile,v 1.21 2026/08/11 05:42:12 adam Exp $
 
-DISTNAME=      cbor2-6.1.3
+DISTNAME=      cbor2-6.1.4
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cbor2/}

Index: pkgsrc/devel/py-cbor2/distinfo
diff -u pkgsrc/devel/py-cbor2/distinfo:1.18 pkgsrc/devel/py-cbor2/distinfo:1.19
--- pkgsrc/devel/py-cbor2/distinfo:1.18 Sun Jul  5 10:15:51 2026
+++ pkgsrc/devel/py-cbor2/distinfo      Tue Aug 11 05:42:12 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.18 2026/07/05 10:15:51 adam Exp $
+$NetBSD: distinfo,v 1.19 2026/08/11 05:42:12 adam Exp $
 
 BLAKE2s (autocfg-1.5.0.crate) = d9738bc6755bf80a73705691ef930ca883cd58e4a2d1162b5c0a09cdc7029304
 SHA512 (autocfg-1.5.0.crate) = f279856f234d39d369623576acf9546a1ca24d7fe449f36d4fb93ea75a7efaf2c4015b9616a69bbbed358c5e5882e16b045352f046aa4c049b3d13b1e8257b08
@@ -6,9 +6,9 @@ Size (autocfg-1.5.0.crate) = 18729 bytes
 BLAKE2s (bigdecimal-0.4.10.crate) = 9f463d819252ec820d657de9d8d95a73924071f13181255dbedcc0047ef2c235
 SHA512 (bigdecimal-0.4.10.crate) = 706b7e33a2b375fc84ab6b617382145dd65e38e361498774493fad240a399e5a5e5f948604c831e9ca65eaa36df12ec7197c51fc80487680849129775d9256fc
 Size (bigdecimal-0.4.10.crate) = 126514 bytes
-BLAKE2s (cbor2-6.1.3.tar.gz) = bbea2b8a4e51182138ad22875906eabd37bc57dec07b48cf46bcf790500b4f39
-SHA512 (cbor2-6.1.3.tar.gz) = 83416f8cce4c800f14b0538e7c03b4f45f4a72ceea2388e811d591ef441ec7df79512efcd0a2f79657ab1b8481217f7bd99f431307d0967a683601ced096fb66
-Size (cbor2-6.1.3.tar.gz) = 89503 bytes
+BLAKE2s (cbor2-6.1.4.tar.gz) = 0de51a669058bfe9e2d946c6921fcb8c122b07870b94153658c7de2cd8dc9773
+SHA512 (cbor2-6.1.4.tar.gz) = f16de2df37b45864f2580a96a7edb632ce961c8f858780912497584641cbb3f5c9c1f0eba37d9c20439e6efc96074c6a87f5b4917bf66c2e61059ed5dfa8ae32
+Size (cbor2-6.1.4.tar.gz) = 90840 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes