CVS commit: pkgsrc/net/p5-Net-OAuth

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Aug 19 18:33:03 UTC 2026

Modified Files:
        pkgsrc/net/p5-Net-OAuth: Makefile distinfo

Log Message:
p5-Net-OAuth: update to 0.33.

0.33   Mon 17 Aug 23:14:01 BST 2026
       [Security]
       - Restrict the verification algorithm to those specified in the allowed_signature_methods, which is
         now required.  THIS IS A BREAKING CHANGE.

         See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889)
         for more information.

       - HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.

       - HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589).

       [Documentation]
       - Updated the GitHub repository location, which moved before the version 0.32 release.
         (The former location does redirect to the new location.)

       - Removed CONTRIBUTING.md due to changes in the AI policy.

       - Updated copyright year.


To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.29 pkgsrc/net/p5-Net-OAuth/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/p5-Net-OAuth/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/p5-Net-OAuth/Makefile
diff -u pkgsrc/net/p5-Net-OAuth/Makefile:1.28 pkgsrc/net/p5-Net-OAuth/Makefile:1.29
--- pkgsrc/net/p5-Net-OAuth/Makefile:1.28       Sun Aug 16 15:24:31 2026
+++ pkgsrc/net/p5-Net-OAuth/Makefile    Wed Aug 19 18:33:03 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.28 2026/08/16 15:24:31 wiz Exp $
+# $NetBSD: Makefile,v 1.29 2026/08/19 18:33:03 wiz Exp $
 
-DISTNAME=      Net-OAuth-0.32
+DISTNAME=      Net-OAuth-0.33
 PKGNAME=       p5-${DISTNAME}
 CATEGORIES=    net perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/R/RR/RRWO/}

Index: pkgsrc/net/p5-Net-OAuth/distinfo
diff -u pkgsrc/net/p5-Net-OAuth/distinfo:1.9 pkgsrc/net/p5-Net-OAuth/distinfo:1.10
--- pkgsrc/net/p5-Net-OAuth/distinfo:1.9        Sun Aug 16 15:24:31 2026
+++ pkgsrc/net/p5-Net-OAuth/distinfo    Wed Aug 19 18:33:03 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2026/08/16 15:24:31 wiz Exp $
+$NetBSD: distinfo,v 1.10 2026/08/19 18:33:03 wiz Exp $
 
-BLAKE2s (Net-OAuth-0.32.tar.gz) = a6a8ccba243437ff724b4e867964b899f1c40f59f52fcd4dd7fb9adaa4d876e0
-SHA512 (Net-OAuth-0.32.tar.gz) = 4fb48f6d210f62eec85694fd040b1593293b0035df659e6d5bec21a79155c6fbf3ffdd02766deda02833fbffc07eb3153e83fab517362bdb104ea0bf5d8d440f
-Size (Net-OAuth-0.32.tar.gz) = 32274 bytes
+BLAKE2s (Net-OAuth-0.33.tar.gz) = 431a728559925c1e7d076a346164176d9427a6d2942fa7e0f51fd14cb5f41caa
+SHA512 (Net-OAuth-0.33.tar.gz) = f2f9f122a68e64b54cd2892ac92d6443bd21a839b5caf689703d1d609dfb2f81e8a9076f099eb8bfae232cd2fd333b497951043028f7a3238ba3c2df1f367e4c
+Size (Net-OAuth-0.33.tar.gz) = 32999 bytes