CVS commit: pkgsrc/devel/py-wheel

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Aug 12 07:58:55 UTC 2026

Modified Files:
        pkgsrc/devel/py-wheel: Makefile distinfo

Log Message:
py-wheel: updated to 0.48.0

**0.48.0** (2026-08-12)

- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or remove a
  PEP 440 local version identifier from a wheel
- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata versions
- Fixed ``wheel tags`` producing invalid archives when retagging wheels whose
  entries use ZIP64, by dropping the central-directory ZIP64 extra field that is
  not valid in a local file header
- Fixed ``wheel convert`` writing the converted wheel outside the destination
  directory when the input archive contained a maliciously crafted project name
  or version with path separators (arbitrary file write / path traversal)


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 pkgsrc/devel/py-wheel/Makefile
cvs rdiff -u -r1.34 -r1.35 pkgsrc/devel/py-wheel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-wheel/Makefile
diff -u pkgsrc/devel/py-wheel/Makefile:1.45 pkgsrc/devel/py-wheel/Makefile:1.46
--- pkgsrc/devel/py-wheel/Makefile:1.45 Fri Apr 24 11:08:02 2026
+++ pkgsrc/devel/py-wheel/Makefile      Wed Aug 12 07:58:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.45 2026/04/24 11:08:02 adam Exp $
+# $NetBSD: Makefile,v 1.46 2026/08/12 07:58:54 adam Exp $
 
-DISTNAME=      wheel-0.47.0
+DISTNAME=      wheel-0.48.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=w/wheel/}

Index: pkgsrc/devel/py-wheel/distinfo
diff -u pkgsrc/devel/py-wheel/distinfo:1.34 pkgsrc/devel/py-wheel/distinfo:1.35
--- pkgsrc/devel/py-wheel/distinfo:1.34 Fri Apr 24 11:08:02 2026
+++ pkgsrc/devel/py-wheel/distinfo      Wed Aug 12 07:58:54 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.34 2026/04/24 11:08:02 adam Exp $
+$NetBSD: distinfo,v 1.35 2026/08/12 07:58:54 adam Exp $
 
-BLAKE2s (wheel-0.47.0.tar.gz) = 40f8140c14520d86ff78f6f0d6ec39e34b6c75509b130ce7e248bbd224c375fa
-SHA512 (wheel-0.47.0.tar.gz) = cf2010e36c031ba47f6302a233811e57f0187244b06cdeff5ae5d2fb6cc16dfba594facbb3f58f795ec308d71a8a0332d09e610bb8720f2c9e8942a914bf3bc4
-Size (wheel-0.47.0.tar.gz) = 63854 bytes
+BLAKE2s (wheel-0.48.0.tar.gz) = 40737791d9f33c7f879d7b6e52e1ca1b18164706df3e32fbe2f754138a9b99c4
+SHA512 (wheel-0.48.0.tar.gz) = 5890947bc1c4dd02e73f85afddf19122c712d3e5ae67dec96562246e6ac9df7a3380a57c2bb0dde21f103622e8d71e02c36d8ba7bc2fd23c8fdab362a059f653
+Size (wheel-0.48.0.tar.gz) = 66471 bytes