CVS commit: pkgsrc/devel/apache-ant

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/devel/apache-ant
From: "Thomas Klausner" <wiz%netbsd.org@localhost>
Date: Sat, 12 Sep 2026 15:28:54 +0000

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Sep 12 15:28:54 UTC 2026

Modified Files:
        pkgsrc/devel/apache-ant: Makefile PLIST distinfo

Log Message:
apache-ant: update to 1.10.18.

Fixes CVE-2025-7962.

Changes from Ant 1.10.17 TO Ant 1.10.18
=======================================

Other changes:
--------------

 * when using the SOURCE_DATE_EPOCH environment variable to set the
   time for <tstamp> the timezone will now be set to UTC for DSTAMP,
   TSTAMP and TODAY. This also applies to nested formats where the
   locale now also defaults to en_US unless it (or the timezone) have
   been set explicitly.
   Based on a patch used by the Debian Ant package maintainers.
   Part of Bugzilla Report 61269

 * Upgraded the jakarta.mail dependency to 2.0.2 because of
   CVE-2025-7962.

 * the SOURCE_DATE_EPOCH environment variable as well as the magic
   ant.tstamp.now and ant.tstamp.now.iso properties now also affect
   the timestamp added to a properties file written by <propertyfile>
   - but only if jdkproperties has its default value of false.
   Based on a patch used by the Debian Ant package maintainers.
   Part of Bugzilla Report 61269

 * a new method getBuildDate in Project can now be used to calculate a
   notion of a "build date" that consults the SOURCE_DATE_EPOCH environment
   variable as well as the magic ant.tstamp.now and ant.tstamp.now.iso
   properties in this order which you can use if you want to obtain a
   reproducible timestamp in tasks you write yourself.

 * The "record" task now has a new "relativeToBaseDir" attribute,
   which can be set to "yes" or "no", to control where the
   recorder's file gets created. In the absence of this attribute,
   if the "name" of the recorder was a relative path, then the
   recorder would create the file in the current working directory
   of the process. With this new attribute, the recorder can be
   configured to create that file in the basedir of the project.
   Bugzilla Report 17781

Fixed bugs:
-----------

 * When running with "microsoft" Java, Ant used to hardcode the
   "$JAVA_HOME/Packages" directory in the runtime Paths for certain
   tasks. The JDK shipped by Microsoft no longer contains that
   directory (for several decades now). As a result, when running with
   "microsoft" Java, an exception would be raised due to the missing
   directory. This has now been fixed and Ant no longer adds that
   directory to the Java runtime Paths.
   Github Pull Request #230

 * Inaccuracies in the documentation of the "record" task have been
   fixed.
   Bugzilla Report 70158

 * <mappedresources> with "enableMultipleMappings" set to "true" threw
   a NullPointerException if the mapper didn't apply to one of the
   resources. Unmapped resources are now omitted from the collection.

Changes from Ant 1.10.16 TO Ant 1.10.17
=======================================

Fixed bugs:
-----------

 * The JavaEnvUtils and FileUtils classes statically depend on each
   other since Ant 1.10.16 making it impossible to load JavaEnvUtils
   without loading FileUtils first causing NullPointerException for
   programmatic use on Windows. This affected Eclipse and may also
   affect other projects using Ant as a library.
   The classes can now be loaded independently again.
   Bugzilla Report 69992

Changes from Ant 1.10.15 TO Ant 1.10.16
=======================================

Changes that could break older environments:
-------------------------------------------

 * <xslt> now uses the same logic to compare file timestamps when
   determining whether a target file is out-of-date with respect to
   the source file or stylesheet that most other tasks use. This means
   it will assume a default timestamp granularity that depends on the
   current operating system.
   A new granularity attribute allows you to override the assumed
   granularity.
   Under certain edge cases this means xslt will now not process files
   it would have processed before (when the timestamps of source or
   stylesheet are very close or even equal to the timestamp of the
   target). In this case you can set granularity to 0 to get back to
   the behavior of 1.10.15.
   Bugzilla Report 65756

 * the <mail> task as well as MailLogger will now check the server
   identity as specified by RFC 2595 when JavaMail is used in
   combination with TLS (plain TLS or StartTLS).
   The check can be disabled with a new MailLogger property
   MailLogger.tls.checkserveridentity or a new <mail> task attribute
   checkServerIdentity.
   Bugzilla Report 69416

 * Ant now recognizes Windows junctions and treats them just like
   symbolic links in general. With this builds on Windows that use
   followSymlinks="false" and rely on Ant following Windows junctions
   will break. In order to get the old behavior you need to set
   followSymlinks to true and exclude real symbolic links via the
   <symlink> selector.
   Bugzilla Report 66293

Fixed bugs:
-----------

 * <scp> now properly handles IPv6 addresses as hostnames.
   Bugzilla Report 59160

 * javac task has been fixed to generate the "-classpath" option
   only when there are any classpath elements present.
   Bugzilla Report 69586

 * URLResource#getName could strip the first character of a resource
   path even if it was not a file separator.
   Bugzilla Report 69680

 * ant.bat now exits with a non-zero exit code if ANT_HOME is not set.
   Github Pull Request #222

 * A regression in ftp task caused some files to not be downloaded.
   That has been fixed now.
   Bugzilla Report 69485

Other changes:
--------------

 * Ant will no longer set a java.lang.SecurityManager at runtime
   if the "java.security.manager" system property is set to
   "disallow".
   Github Pull Request #216

 * <mail> and MailLogger can now enforce the use of STARTLS rather
   than silently fall back to unencrypted authentication via a new
   MailLogger property and a new <mail> task attribute.
   Bugzilla Report 69416

 * added a Windows specific <mklink> task that can be used to create
   hard links, symbolic links and junctions.

 * added <delete link="..."> that can be used delete symbolic links or
   Windows junctions. For symbolic links this duplicates what
   <symlink action="delete" ...> does - it has been introduced to
   handle symlinks and junctions via a single API.

 * added <canCreateSymlink> condition that evaluates to true if the
   current Ant process can create symbolic links.

 * added <windowsjunction> file selector which only selects directories
   that are Windows junctions.

 * added a new actOnLinkTargets attribute to <setpermissions> to
   control whether the permissions apply to a symbolic link or Windows
   junction or the target of the respective links. The old behavior
   of changing the link's target remains as default.

 * a new combination of attributes allows <sshexec> to mask sensitive
   data specified for the command line to execute.
   Github Pull Request #124

Changes from Ant 1.10.14 TO Ant 1.10.15
=======================================

Other changes:
--------------

 * exec task now logs the process' non-zero exit code at INFO
   level instead of the previous ERROR level. The following
   message from exec task is the one who's level has been changed:

   Result: 1

   Bugzilla Report 26453

 * Removes direct references to com.sun.net.ssl.internal.ssl.Provider class
   from the mail task, since that internal JDK class is no longer available
   in recent versions of Java.
   Bugzilla Report 68460

 * <replaceregexp> has a new failOnError attribute which, when
   enabled, makes the task throw a BuildException for certain error
   cases that will only be logged otherwise.
   Github Pull Request #206

 * <ftp> task now has a new "useSecureDataChannel" attribute which
   can be set to true, when ftps is enabled, to enable secure data
   channel.
   Bugzilla Report 68773

Fixed bugs:
-----------

 * Fixes an regression, introduced in Ant 1.10.13, where pathconvert
   would unintentionally trim the string output.
   Bugzilla Report 67082

 * Fixes a bug in <depend> task which would throw a ClassFormatError
   if it encountered constant pool entry type 17.
   Bugzilla Report 66552

 * Launching ant.bat from within a Java program using java.lang.Runtime.exec()
   could result in an unexpected failure. This has now been fixed.
   Bugzilla Report 67417

 * Fixes an issue in bootstrap.bat when trying to detect if the "javac"
   command in the JDK supports the "--release" option.
   Github Pull Request #205

 * Fixes a bug in org.apache.tools.ant.taskdefs.email.EmailAddress which
   would throw a java.lang.StringIndexOutOfBoundsException if the email
   address passed to its constructor was an empty String.
   Bugzilla Report 68462

 * legacy-xml reporter of junitlauncher task was using a non-buffered
   outputstream when generating the report. This introduces severe
   performance penalties since the writes translate to native write
   system calls. This has been fixed to use a BufferedOutputStream.
   Github Pull Request #207


To generate a diff of this commit:
cvs rdiff -u -r1.58 -r1.59 pkgsrc/devel/apache-ant/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/devel/apache-ant/PLIST
cvs rdiff -u -r1.42 -r1.43 pkgsrc/devel/apache-ant/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/apache-ant/Makefile
diff -u pkgsrc/devel/apache-ant/Makefile:1.58 pkgsrc/devel/apache-ant/Makefile:1.59
--- pkgsrc/devel/apache-ant/Makefile:1.58       Sat Sep  9 21:12:49 2023
+++ pkgsrc/devel/apache-ant/Makefile    Sat Sep 12 15:28:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.58 2023/09/09 21:12:49 wiz Exp $
+# $NetBSD: Makefile,v 1.59 2026/09/12 15:28:54 wiz Exp $
 
-DISTNAME=      apache-ant-1.10.14-bin
+DISTNAME=      apache-ant-1.10.18-bin
 PKGNAME=       ${DISTNAME:S/-bin//}
 CATEGORIES=    devel java
 MASTER_SITES=  ${MASTER_SITE_APACHE:=ant/binaries/}

Index: pkgsrc/devel/apache-ant/PLIST
diff -u pkgsrc/devel/apache-ant/PLIST:1.32 pkgsrc/devel/apache-ant/PLIST:1.33
--- pkgsrc/devel/apache-ant/PLIST:1.32  Sat Sep  9 21:12:49 2023
+++ pkgsrc/devel/apache-ant/PLIST       Sat Sep 12 15:28:54 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.32 2023/09/09 21:12:49 wiz Exp $
+@comment $NetBSD: PLIST,v 1.33 2026/09/12 15:28:54 wiz Exp $
 bin/ant
 bin/antRun
 lib/java/ant/ant-antlr.jar
@@ -129,6 +129,7 @@ share/doc/java/ant/Tasks/manifest.html
 share/doc/java/ant/Tasks/manifestclasspath.html
 share/doc/java/ant/Tasks/mimemail.html
 share/doc/java/ant/Tasks/mkdir.html
+share/doc/java/ant/Tasks/mklink.html
 share/doc/java/ant/Tasks/move.html
 share/doc/java/ant/Tasks/native2ascii.html
 share/doc/java/ant/Tasks/netrexxc.html
@@ -225,21 +226,32 @@ share/doc/java/ant/WHATSNEW
 share/doc/java/ant/antexternal.html
 share/doc/java/ant/anttaskslist.html
 share/doc/java/ant/api/allclasses-index.html
+share/doc/java/ant/api/allclasses.html
 share/doc/java/ant/api/allpackages-index.html
 share/doc/java/ant/api/constant-values.html
-share/doc/java/ant/api/copy.svg
 share/doc/java/ant/api/deprecated-list.html
 share/doc/java/ant/api/element-list
 share/doc/java/ant/api/help-doc.html
 share/doc/java/ant/api/index-all.html
 share/doc/java/ant/api/index.html
-share/doc/java/ant/api/legal/ADDITIONAL_LICENSE_INFO
+share/doc/java/ant/api/jquery-ui.overrides.css
+share/doc/java/ant/api/jquery/external/jquery/jquery.js
+share/doc/java/ant/api/jquery/jquery-3.7.1.min.js
+share/doc/java/ant/api/jquery/jquery-ui.min.css
+share/doc/java/ant/api/jquery/jquery-ui.min.js
+share/doc/java/ant/api/jquery/jszip-utils/dist/jszip-utils-ie.js
+share/doc/java/ant/api/jquery/jszip-utils/dist/jszip-utils-ie.min.js
+share/doc/java/ant/api/jquery/jszip-utils/dist/jszip-utils.js
+share/doc/java/ant/api/jquery/jszip-utils/dist/jszip-utils.min.js
+share/doc/java/ant/api/jquery/jszip/dist/jszip.js
+share/doc/java/ant/api/jquery/jszip/dist/jszip.min.js
 share/doc/java/ant/api/legal/ASSEMBLY_EXCEPTION
-share/doc/java/ant/api/legal/LICENSE
 share/doc/java/ant/api/legal/jquery.md
 share/doc/java/ant/api/legal/jqueryUI.md
+share/doc/java/ant/api/legal/jszip.md
+share/doc/java/ant/api/legal/pako.md
 share/doc/java/ant/api/member-search-index.js
-share/doc/java/ant/api/module-search-index.js
+share/doc/java/ant/api/member-search-index.zip
 share/doc/java/ant/api/org/apache/tools/ant/AntClassLoader.html
 share/doc/java/ant/api/org/apache/tools/ant/AntTypeDefinition.html
 share/doc/java/ant/api/org/apache/tools/ant/ArgumentProcessor.html
@@ -652,6 +664,7 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/compilers/package-tree.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/And.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/AntVersion.html
+share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/CanCreateSymbolicLink.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/Condition.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/ConditionBase.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/condition/Contains.html
@@ -796,6 +809,7 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/ConstantPool.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/ConstantPoolEntry.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/DoubleCPInfo.html
+share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/DynamicCPInfo.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/FieldRefCPInfo.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/FloatCPInfo.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/depend/constantpool/IntegerCPInfo.html
@@ -1089,6 +1103,8 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/vss/package-summary.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/vss/package-tree.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/windows/Attrib.html
+share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/windows/Mklink.LinkType.html
+share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/windows/Mklink.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/windows/package-summary.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/windows/package-tree.html
 share/doc/java/ant/api/org/apache/tools/ant/taskdefs/optional/xz/Unxz.html
@@ -1346,6 +1362,7 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/TokenizedPattern.html
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/TypeSelector.FileType.html
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/TypeSelector.html
+share/doc/java/ant/api/org/apache/tools/ant/types/selectors/WindowsJunctionSelector.html
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/WritableSelector.html
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/modifiedselector/Algorithm.html
 share/doc/java/ant/api/org/apache/tools/ant/types/selectors/modifiedselector/Cache.html
@@ -1446,6 +1463,7 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/org/apache/tools/ant/util/Watchdog.html
 share/doc/java/ant/api/org/apache/tools/ant/util/WeakishReference.HardReference.html
 share/doc/java/ant/api/org/apache/tools/ant/util/WeakishReference.html
+share/doc/java/ant/api/org/apache/tools/ant/util/WindowsJunctionUtils.html
 share/doc/java/ant/api/org/apache/tools/ant/util/WorkerAnt.html
 share/doc/java/ant/api/org/apache/tools/ant/util/XMLFragment.Child.html
 share/doc/java/ant/api/org/apache/tools/ant/util/XMLFragment.html
@@ -1539,19 +1557,15 @@ share/doc/java/ant/api/org/apache/tools/
 share/doc/java/ant/api/overview-summary.html
 share/doc/java/ant/api/overview-tree.html
 share/doc/java/ant/api/package-search-index.js
+share/doc/java/ant/api/package-search-index.zip
 share/doc/java/ant/api/resources/glass.png
 share/doc/java/ant/api/resources/x.png
-share/doc/java/ant/api/script-dir/jquery-3.6.1.min.js
-share/doc/java/ant/api/script-dir/jquery-ui.min.css
-share/doc/java/ant/api/script-dir/jquery-ui.min.js
 share/doc/java/ant/api/script.js
-share/doc/java/ant/api/search-page.js
-share/doc/java/ant/api/search.html
 share/doc/java/ant/api/search.js
 share/doc/java/ant/api/serialized-form.html
 share/doc/java/ant/api/stylesheet.css
-share/doc/java/ant/api/tag-search-index.js
 share/doc/java/ant/api/type-search-index.js
+share/doc/java/ant/api/type-search-index.zip
 share/doc/java/ant/argumentprocessor.html
 share/doc/java/ant/base_task_classes.html
 share/doc/java/ant/clonevm.html

Index: pkgsrc/devel/apache-ant/distinfo
diff -u pkgsrc/devel/apache-ant/distinfo:1.42 pkgsrc/devel/apache-ant/distinfo:1.43
--- pkgsrc/devel/apache-ant/distinfo:1.42       Sat Sep  9 21:12:49 2023
+++ pkgsrc/devel/apache-ant/distinfo    Sat Sep 12 15:28:54 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.42 2023/09/09 21:12:49 wiz Exp $
+$NetBSD: distinfo,v 1.43 2026/09/12 15:28:54 wiz Exp $
 
-BLAKE2s (apache-ant-1.10.14-bin.tar.xz) = 4383cda2c280fe5f70d738049ca441de671d356d844447c972535193a3759028
-SHA512 (apache-ant-1.10.14-bin.tar.xz) = a77c2008582ed99802ddd5c87eef7b433978da9a3e5d500da6f5df9d9571bd5a165b7ce85d1742b7f0d89650ff89c23cb1f4fe52a7775c774ef432d28ac0d82a
-Size (apache-ant-1.10.14-bin.tar.xz) = 4844448 bytes
+BLAKE2s (apache-ant-1.10.18-bin.tar.xz) = 5c84291aa04f1056b3b2e1bcc6c11d7d6152838b5a779acc460a5adccd26d632
+SHA512 (apache-ant-1.10.18-bin.tar.xz) = 3cc0c48a744dd21e8e7fed30c555e8efcac709839c527c57600ab6d7d02383207d7c619d434bb1c9b5ff3f956c77a0c587b1dcfbf3c72ec9d78300caf82c0567
+Size (apache-ant-1.10.18-bin.tar.xz) = 5100020 bytes
 SHA1 (patch-bin_ant) = 4087064f78ad86bc209c777f717f63d5e612cfd6

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index