CVS commit: pkgsrc/devel/py-urwid

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Oct  7 05:29:07 UTC 2026

Modified Files:
        pkgsrc/devel/py-urwid: Makefile distinfo

Log Message:
py-urwid: updated to 4.2.5

4.2.5

Deprecations

Deprecate non-integer index in deque insert()
 Deprecate the unused _sigcont_handler (removal in 5.0); also a bug fix, see "Major bug fixes" below: Do terminal signal work in the input loop, not in handlers

Security fixes

Replace C1 control characters (U+0080-U+009F) in raw display output, so displayed text cannot inject terminal escape sequences such as OSC 52 clipboard writes
Stop crafted terminal input (a paste with about 1000 ESC bytes, malformed mouse reports, an ESC before a terminal report) from crashing the input parser and ending the main loop
Read terminal input at most 64 KiB per wake-up, so a fast producer cannot grow memory without bound; also fix ValueError from select() on descriptors numbered 1024 or higher
Limit the memory and time ANSIText spends on untrusted output (cursor moves, padding, long CSI and OSC sequences); out-of-range SGR colours are ignored instead of raising
Lay out long text in linear time instead of quadratic time (80000 characters without spaces: 5.4 s -> 65 ms); also fix wrong attribute runs in markup that mixes str and bytes
Stop a masked Edit from exposing its text in repr() and in ValueError; refuse control characters as input; stop IntEdit from accepting more digits than int() can convert
Handle very deep and cyclic trees: no RecursionError on deep trees, TreeWidgetError instead of an endless loop on a cycle, faster sibling lookup (up to 98% less time), and cached nodes of removed 
keys are freed
End an OSC string at an ESC that does not start the terminator, so the text after it can no longer end up in the window title
Keep zero-width control characters and escape sequences out of drawn text, so untrusted text no longer overflows its column and overwrites the next widget

Major bug fixes 🕷

Do terminal signal work in the input loop, not in the signal handlers: suspend (SIGTSTP) and resize (SIGWINCH) no longer change the screen and terminal mode at an arbitrary point of a running draw; 
also deprecates the unused _sigcont_handler, see "Deprecations"
Fix ZMQEventLoop.watch_file() with a ZMQ socket (raised KeyError), and remove a watch by either the object or its descriptor number
Stop draw_screen from spinning at full CPU forever after the terminal can no longer be written to (hangup, broken pipe)
Restore the asyncio loop's exception handler after run(), so an unrelated task exception no longer stops the application's own loop
Fix the Windows console reader: characters outside the BMP no longer end the reader and lose all later input, failed reads no longer spin, and stopping the screen no longer waits up to 5 s
Fix watch_pipe: no second read task on a pipe that is still readable, no double close of a descriptor that may belong to another file, and no full-CPU spin at end of file (the callback gets b"" once 
and the watch is removed)
Fix ListBox repeating items when a wrapping walker is shorter than the available height
Fix ListBox hangs and slowdowns with many 0-height widgets (up to 98% less time), scrolling keys that never ended on wrapping bodies, ListBoxError from page up, page down and end, and ListBox objects 
kept alive by their walker
Free widgets that were dropped from the canvas cache: wrappers rebuilt around a cached child (for example GridFlow display widgets on each focus change) were never freed


To generate a diff of this commit:
cvs rdiff -u -r1.77 -r1.78 pkgsrc/devel/py-urwid/Makefile
cvs rdiff -u -r1.65 -r1.66 pkgsrc/devel/py-urwid/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-urwid/Makefile
diff -u pkgsrc/devel/py-urwid/Makefile:1.77 pkgsrc/devel/py-urwid/Makefile:1.78
--- pkgsrc/devel/py-urwid/Makefile:1.77 Sun Oct  4 17:10:54 2026
+++ pkgsrc/devel/py-urwid/Makefile      Wed Oct  7 05:29:07 2026
@@ -1,12 +1,12 @@
-# $NetBSD: Makefile,v 1.77 2026/10/04 17:10:54 wiz Exp $
+# $NetBSD: Makefile,v 1.78 2026/10/07 05:29:07 adam Exp $
 
-DISTNAME=      urwid-4.2.4
+DISTNAME=      urwid-4.2.5
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=u/urwid/}
 
 MAINTAINER=    tonio%NetBSD.org@localhost
-HOMEPAGE=      http://urwid.org/
+HOMEPAGE=      https://urwid.org/
 COMMENT=       Curses-based Python user interface library
 LICENSE=       gnu-lgpl-v2.1
 

Index: pkgsrc/devel/py-urwid/distinfo
diff -u pkgsrc/devel/py-urwid/distinfo:1.65 pkgsrc/devel/py-urwid/distinfo:1.66
--- pkgsrc/devel/py-urwid/distinfo:1.65 Sun Oct  4 17:10:54 2026
+++ pkgsrc/devel/py-urwid/distinfo      Wed Oct  7 05:29:07 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.65 2026/10/04 17:10:54 wiz Exp $
+$NetBSD: distinfo,v 1.66 2026/10/07 05:29:07 adam Exp $
 
-BLAKE2s (urwid-4.2.4.tar.gz) = abd178935b44fbf38fc659adfc52320ef266e88460eb1a9727a6232f172a490f
-SHA512 (urwid-4.2.4.tar.gz) = 9c434f870d2ebc3aa92a76fd78c054751dbac34fedfbc3230676fd94b539ae58e01570e679170fa5eb518c3bc1e147198372080e4e9a015f23cc0a98da33af85
-Size (urwid-4.2.4.tar.gz) = 346523 bytes
+BLAKE2s (urwid-4.2.5.tar.gz) = b2b9797896fe28e6cc62adbd6cd7df56289e8a0e1de35bfa714a975c807adcb1
+SHA512 (urwid-4.2.5.tar.gz) = 4f2e02cc23cd1974c0a86bbfe3c4b8cd9920b165af17dca8dd0997a7b8ae8da844ed2e4b0adf3fda38ff6d81d465c5a3db3efaf036454cbbd0116c4ae9107283
+Size (urwid-4.2.5.tar.gz) = 358848 bytes