CVS commit: pkgsrc/www/py-django-bootstrap5

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Oct 24 09:38:03 UTC 2026

Modified Files:
        pkgsrc/www/py-django-bootstrap5: Makefile PLIST distinfo

Log Message:
py-django-bootstrap5: updated to 26.4

26.4 (2026-10-11)

- **Breaking:** Drop support for Python 3.10, end of life since 2026-10-01. The floor is now Python 3.11.
- **Breaking:** Remove `django_bootstrap5.text.text_concat`. It is a general string helper, not a Bootstrap concern, and nothing in the package has ever called it: its one caller joined an icon to a 
button label and went away when icon support was removed, before this package was forked. It was never documented. If you import it, the replacement is three lines
- Remove `BaseRenderer.get_size_class`, which nothing called. The module-level `get_size_class` in `django_bootstrap5.size` is the one in use, and the method shadowed its name inside the class body.
- Fix a `template_name` set on a `RadioSelect`, `CheckboxSelectMultiple` or `ClearableFileInput` subclass being overwritten by this package's own widget template
- Accept a non-string URL value in `css_url`, `javascript_url` and `theme_url`, so a lazy `static()` value can be used directly instead of only inside the dict form
- Recognize `week`, `search` and `color` input-type widgets as form-control widgets, so `addon_before`/`addon_after` work on them, and warn instead of silently dropping addons on a widget that cannot 
have them
- Add the documented `inline_field_class` setting to `BOOTSTRAP5_DEFAULTS`, where it was missing. Its effective default is unchanged.
- Store `src/django_bootstrap5/widgets.py` with LF line endings, like every other file and as `.editorconfig` requires. It was the only file in the repository with CRLF.
- Support `addon_before`/`addon_after` on fields with `layout="floating"`
- Add a system check that warns about keys in the `BOOTSTRAP5` setting that the package does not read, such as a setting removed in an earlier release or one carried over from django-bootstrap3 or 
django-bootstrap4 (`django_bootstrap5.W001`). Silence it with `SILENCED_SYSTEM_CHECKS` if you keep extra keys deliberately.
- Harden the release and Dependabot workflows, and write down the dependency update policy in MAINTAINING.md. The Dependabot auto-merge job gated on `github.actor`, which is spoofable in a 
`pull_request_target` context, and now gates on the pull request author, with `fetch-metadata` as a second check. The publishing job no longer restores a build cache, so a poisoned entry cannot reach 
what is uploaded to PyPI. Every job in every workflow now carries `timeout-minutes`, and `ci.yml` declares `permissions: contents: read`.
- Fail `just lint` on invisible and bidirectional control characters, which can make source read differently to a human than to the compiler (Trojan Source, CVE-2021-42574).
- Cover every statement and branch in the test suite, and hold it there with `fail_under = 100`, checked by a `coverage report` step in CI. Until that step existed the floor was set but never run.
- Fail the CI gate when any job fails, not only the test matrix. A failing docs or packaging build could previously be merged.
- Test on Python 3.15 against Django 6.1 and `main`. The job is non-blocking and 3.15 is not advertised as supported, because no Django release claims it yet.
- Drop a duplicate `coverage[toml]` entry from the `test` dependency group and sort it alphabetically.
- Add `just release-check` to list `src/` changes against changelog entries before a release.
- Show commits that touch nothing in `src/` in `just release-check` as a second group, instead of hiding them. Tooling, CI and documentation changes belong in the release notes too, and the old 
output read as a complete list while being a filtered one.
- Fail `just build` when `uv.lock` does not name the version in `pyproject.toml`, and add `just relock` to fix it. `uv sync --frozen` does not check the project's own version, so a stale lock passed 
every packaging check.
- Add the shared AI assistance policy to CONTRIBUTING.md. Using an AI assistant is fine; saying so when it wrote a meaningful part of a change is the requirement, and it is not held against you.
- Document migrating from django-bootstrap3 in `MIGRATE.md`: renamed settings and their changed defaults, the removed `buttons`, `bootstrap_icon` and `bootstrap_message_classes`, renamed tag 
arguments, and the Bootstrap class changes that take most of the work.
- Cover jQuery in the migration guide: what replaces the `jquery_url` setting and the jQuery tags, and that django-bootstrap3's default pointed at a CDN alias still serving jQuery 1.11.1, so choosing 
a version is likely a jump of two majors. Also say to delete the old `BOOTSTRAP3` block, since `W001` only inspects `BOOTSTRAP5` and a leftover block reads like live configuration with nothing 
warning about it.
- Fix the release process in MAINTAINING.md: the version bump goes through a PR, not a direct push to protected `main`.
- Say in MAINTAINING.md that `just release-check` reporting no `Unreleased` entries straight after a cut means nothing is pending, not that the changelog was lost.
- Note in MAINTAINING.md why the `Django` dependency carries no upper bound.


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/py-django-bootstrap5/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/py-django-bootstrap5/PLIST
cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/py-django-bootstrap5/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django-bootstrap5/Makefile
diff -u pkgsrc/www/py-django-bootstrap5/Makefile:1.11 pkgsrc/www/py-django-bootstrap5/Makefile:1.12
--- pkgsrc/www/py-django-bootstrap5/Makefile:1.11       Wed Sep  2 15:19:36 2026
+++ pkgsrc/www/py-django-bootstrap5/Makefile    Sat Oct 24 09:38:03 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.11 2026/09/02 15:19:36 adam Exp $
+# $NetBSD: Makefile,v 1.12 2026/10/24 09:38:03 adam Exp $
 
-DISTNAME=      django_bootstrap5-26.3
+DISTNAME=      django_bootstrap5-26.4
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/_/-/}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=d/django-bootstrap5/}

Index: pkgsrc/www/py-django-bootstrap5/PLIST
diff -u pkgsrc/www/py-django-bootstrap5/PLIST:1.3 pkgsrc/www/py-django-bootstrap5/PLIST:1.4
--- pkgsrc/www/py-django-bootstrap5/PLIST:1.3   Thu Mar 13 15:13:27 2025
+++ pkgsrc/www/py-django-bootstrap5/PLIST       Sat Oct 24 09:38:03 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2025/03/13 15:13:27 adam Exp $
+@comment $NetBSD: PLIST,v 1.4 2026/10/24 09:38:03 adam Exp $
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
 ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
@@ -10,6 +10,9 @@ ${PYSITELIB}/django_bootstrap5/__about__
 ${PYSITELIB}/django_bootstrap5/__init__.py
 ${PYSITELIB}/django_bootstrap5/__init__.pyc
 ${PYSITELIB}/django_bootstrap5/__init__.pyo
+${PYSITELIB}/django_bootstrap5/apps.py
+${PYSITELIB}/django_bootstrap5/apps.pyc
+${PYSITELIB}/django_bootstrap5/apps.pyo
 ${PYSITELIB}/django_bootstrap5/components.py
 ${PYSITELIB}/django_bootstrap5/components.pyc
 ${PYSITELIB}/django_bootstrap5/components.pyo

Index: pkgsrc/www/py-django-bootstrap5/distinfo
diff -u pkgsrc/www/py-django-bootstrap5/distinfo:1.9 pkgsrc/www/py-django-bootstrap5/distinfo:1.10
--- pkgsrc/www/py-django-bootstrap5/distinfo:1.9        Wed Sep  2 15:19:36 2026
+++ pkgsrc/www/py-django-bootstrap5/distinfo    Sat Oct 24 09:38:03 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2026/09/02 15:19:36 adam Exp $
+$NetBSD: distinfo,v 1.10 2026/10/24 09:38:03 adam Exp $
 
-BLAKE2s (django_bootstrap5-26.3.tar.gz) = bf689837eee62aff3fd2ff379f4128f4292dc8f1a39e0de2055b00b5d7f49d8c
-SHA512 (django_bootstrap5-26.3.tar.gz) = 5f3d0cfc9c1eb0362399b160297f1aa7aa32b894a556f753118614faa11e6c5b148e10e066755cf63ce7315a6eae81dfaa85c3734190c1abae53dfc227e12ed5
-Size (django_bootstrap5-26.3.tar.gz) = 59834 bytes
+BLAKE2s (django_bootstrap5-26.4.tar.gz) = ad9528685a29cb543832c644a08428fc3925bc1f68f7222d5c7d1f1359344125
+SHA512 (django_bootstrap5-26.4.tar.gz) = e5f13ca22ca7fd3f3d6ed7144ce7e43b5dadeb638b085c12d8ad926a7cee6eeb43a31224242b19a5cbefdb417eba2d46d132f04caf1f72b176e4f215d9cfebff
+Size (django_bootstrap5-26.4.tar.gz) = 83829 bytes