CVS commit: pkgsrc/textproc/py-black

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sun Oct 11 07:18:34 UTC 2026

Modified Files:
        pkgsrc/textproc/py-black: Makefile distinfo

Log Message:
py-black: updated to 26.10.1

26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using `psf/black@stable`, and is independent of
the version of Black installed by the action.

When the GitHub Action reads version specifiers from `tool.black.required-version`, it
now only accepts released versions of Black, as it already did for `black` requirements
in dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as `GHSA-cg8m-r9f2-5wm2`; a CVE identifier is pending.

Stable style

- Fix a long Jupyter notebook assignment magic (for example `x = !ls -la`) being wrapped
  in parentheses, which IPython can no longer run; such cells are now left unchanged

- Keep repeated lines outside the selected `--line-ranges` unchanged
- Fix `--line-ranges` formatting lines that follow a statement when formatting joins or
  re-indents that statement
- Fix `--line-ranges` crashing with an internal error when an unselected statement has a
  `# fmt: skip` comment on the last line before a closing bracket
- Prevent moving an encoding declaration (for example `# -*- coding: latin-1 -*-`) onto
  the first two lines of a file
- Fix adding an extra trailing blank line inside a multi-line module docstring when its
  last line is near the line length limit

Preview style

- Do not split short expressions on delimiters (such as binary operators, comparisons,
  or comprehensions) inside brackets when preceded by a standalone comment
- Fix the unstable `string_processing` feature removing backslash-newline sequences from
  raw strings, which changed their value
- Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in
  assignments (such as annotated assignments or subscript targets)
- Parenthesize expressions with parameter comments when they exceed the line length
  under `--preview`
- Fix `wrap_long_dict_values_in_parens` dropping the parentheses around a right-hand
  side that contains a dictionary, leaving a line over the length limit
- Fix the unstable `string_processing` feature adding a space after `*` or `**` in a PEP
  695 type parameter (`* Ts = ...`) when it splits a string in the parameter's default

- Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an
  earlier bracket split exceeds the line length only due to a trailing comment

Configuration

- Add `--cache-dir` to configure the cache directory from the command line
- Don't cache a file as formatted after formatting or checking it with `--line-ranges`,
  which made a later full `black --check` pass and `black` skip the unformatted lines

- Respect a `.gitignore` that starts with a UTF-8 byte order mark. The mark became part
  of the first pattern, so that pattern never matched and Black formatted files that git
  ignores

Performance

- Avoid quadratic runtime when splitting very long lines with many trailing bracket
  pairs (such as consecutive subscripts)

Integrations

- Fix the GitHub Action crashing on dependency-group includes when `use_pyproject` is
  enabled
- When the GitHub Action reads version specifiers from `tool.black.required-version`, it
  now only accepts released versions of Black, as it already did for `black`
  requirements in dependency lists. Other values, such as URL references, are now
  rejected.


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 pkgsrc/textproc/py-black/Makefile
cvs rdiff -u -r1.39 -r1.40 pkgsrc/textproc/py-black/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/py-black/Makefile
diff -u pkgsrc/textproc/py-black/Makefile:1.45 pkgsrc/textproc/py-black/Makefile:1.46
--- pkgsrc/textproc/py-black/Makefile:1.45      Wed Oct  7 05:35:42 2026
+++ pkgsrc/textproc/py-black/Makefile   Sun Oct 11 07:18:34 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.45 2026/10/07 05:35:42 adam Exp $
+# $NetBSD: Makefile,v 1.46 2026/10/11 07:18:34 adam Exp $
 
-DISTNAME=      black-26.10.0
+DISTNAME=      black-26.10.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    textproc devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=b/black/}

Index: pkgsrc/textproc/py-black/distinfo
diff -u pkgsrc/textproc/py-black/distinfo:1.39 pkgsrc/textproc/py-black/distinfo:1.40
--- pkgsrc/textproc/py-black/distinfo:1.39      Wed Oct  7 05:35:42 2026
+++ pkgsrc/textproc/py-black/distinfo   Sun Oct 11 07:18:34 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.39 2026/10/07 05:35:42 adam Exp $
+$NetBSD: distinfo,v 1.40 2026/10/11 07:18:34 adam Exp $
 
-BLAKE2s (black-26.10.0.tar.gz) = 3b8dfcd851d36cc63ae6ffc657549643c590f592fec58f51b7d05d04582e4f3c
-SHA512 (black-26.10.0.tar.gz) = 941ed5eae286d5a43112143f8598597c9e10b1491a550dd024118bd72afeea428640610e514926c6427fd06f9a06f426f7792c26d35a8f28b5c6a489e007f75d
-Size (black-26.10.0.tar.gz) = 728037 bytes
+BLAKE2s (black-26.10.1.tar.gz) = e8ddf3c63046530bd73ffe860928668cf665c1c654a97534b5c3563d1d8bf9c1
+SHA512 (black-26.10.1.tar.gz) = f85ce4e2befad618472ba8077817604637dd5a5b424d393121365b790f8cedacefb2ce037755f1720e845187f0ec194d315ef8880516447aafc66b8c80ff9e92
+Size (black-26.10.1.tar.gz) = 741979 bytes