CVS commit: pkgsrc/security/py-pip-audit

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Mar 19 07:18:43 UTC 2023

Modified Files:
        pkgsrc/security/py-pip-audit: Makefile PLIST distinfo

Log Message:
py-pip_audit: update to 2.5.1.

## [2.5.1]

### Fixed

* Fixed a crash on Windows caused by multiple open file handles to
  input requirements ([#551](https://github.com/pypa/pip-audit/pull/551))

## [2.5.0]

### Changed

* Improved error messaging when a requirements input or indirect dependency
  has an invalid (non-PEP 440) requirements specifier
  ([#507](https://github.com/pypa/pip-audit/pull/507))

* `pip-audit`'s handling of dependency resolution has been significantly
  refactored and simplified ([#523](https://github.com/pypa/pip-audit/pull/523))

### Fixed

* Fixed a potential crash on invalid unicode in subprocess streams
  ([#536](https://github.com/pypa/pip-audit/pull/536))

## [2.4.15]

**YANKED**

### Fixed

* Fixed an issue where hash checking would fail when using third-party indices
  ([#462](https://github.com/pypa/pip-audit/pull/462))

* Fixed the behavior of the `--skip-editable` flag, which had regressed
  with an internal API change
  ([#499](https://github.com/pypa/pip-audit/pull/499))

* Fixed a dependency resolution bug that can potentially be triggered when
  multiple packages have the same subdependency
  ([#488](https://github.com/pypa/pip-audit/pull/488))


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 pkgsrc/security/py-pip-audit/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/py-pip-audit/PLIST
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/py-pip-audit/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-pip-audit/Makefile
diff -u pkgsrc/security/py-pip-audit/Makefile:1.22 pkgsrc/security/py-pip-audit/Makefile:1.23
--- pkgsrc/security/py-pip-audit/Makefile:1.22  Thu Mar 16 08:48:02 2023
+++ pkgsrc/security/py-pip-audit/Makefile       Sun Mar 19 07:18:43 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.22 2023/03/16 08:48:02 adam Exp $
+# $NetBSD: Makefile,v 1.23 2023/03/19 07:18:43 wiz Exp $
 
-DISTNAME=      pip_audit-2.4.14
+DISTNAME=      pip_audit-2.5.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 # pypi file does not include tests
@@ -15,18 +15,17 @@ COMMENT=    Scan Python environments for kn
 LICENSE=       apache-2.0
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-flit_core-[0-9]*:../../devel/py-flit_core
-# unlisted but used
 DEPENDS+=      ${PYPKGPREFIX}-cachecontrol>=0.12.10:../../devel/py-cachecontrol
 DEPENDS+=      ${PYPKGPREFIX}-cyclonedx-python-lib>=2.0.0:../../security/py-cyclonedx-python-lib
 DEPENDS+=      ${PYPKGPREFIX}-html5lib>=1.1:../../textproc/py-html5lib
 DEPENDS+=      ${PYPKGPREFIX}-packaging>=23.0.0:../../devel/py-packaging
 DEPENDS+=      ${PYPKGPREFIX}-pip-api>=0.0.28:../../devel/py-pip-api
 DEPENDS+=      ${PYPKGPREFIX}-pip-requirements-parser>=32.0.0:../../devel/py-pip-requirements-parser
-DEPENDS+=      ${PYPKGPREFIX}-resolvelib>=0.8.0:../../devel/py-resolvelib
 DEPENDS+=      ${PYPKGPREFIX}-rich>=12.4:../../comms/py-rich
 DEPENDS+=      ${PYPKGPREFIX}-toml>=0.10:../../textproc/py-toml
 TEST_DEPENDS+= ${PYPKGPREFIX}-pretend-[0-9]*:../../devel/py-pretend
 TEST_DEPENDS+= ${PYPKGPREFIX}-test-[0-9]*:../../devel/py-test
+TEST_DEPENDS+= git-base-[0-9]*:../../devel/git-base
 
 PYTHON_VERSIONS_INCOMPATIBLE=  27
 
@@ -36,8 +35,6 @@ post-install:
        cd ${DESTDIR}${PREFIX}/bin && \
         ${MV} pip-audit pip-audit-${PYVERSSUFFIX} || ${TRUE}
 
-# as of 2.4.3
-# 1 failed, 168 passed
 TEST_ENV+=     PYTHONPATH=${WRKSRC}/build/lib:${WRKSRC}/build/lib/test
 do-test:
        cd ${WRKSRC} && ${SETENV} ${TEST_ENV} pytest-${PYVERSSUFFIX}

Index: pkgsrc/security/py-pip-audit/PLIST
diff -u pkgsrc/security/py-pip-audit/PLIST:1.7 pkgsrc/security/py-pip-audit/PLIST:1.8
--- pkgsrc/security/py-pip-audit/PLIST:1.7      Thu Jul 14 13:21:26 2022
+++ pkgsrc/security/py-pip-audit/PLIST  Sun Mar 19 07:18:43 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2022/07/14 13:21:26 wiz Exp $
+@comment $NetBSD: PLIST,v 1.8 2023/03/19 07:18:43 wiz Exp $
 bin/pip-audit-${PYVERSSUFFIX}
 ${PYSITELIB}/${WHEEL_INFODIR}/INSTALLER
 ${PYSITELIB}/${WHEEL_INFODIR}/LICENSE
@@ -28,12 +28,6 @@ ${PYSITELIB}/pip_audit/_dependency_sourc
 ${PYSITELIB}/pip_audit/_dependency_source/pyproject.pyc
 ${PYSITELIB}/pip_audit/_dependency_source/requirement.py
 ${PYSITELIB}/pip_audit/_dependency_source/requirement.pyc
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/__init__.py
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/__init__.pyc
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/pypi_provider.py
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/pypi_provider.pyc
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/resolvelib.py
-${PYSITELIB}/pip_audit/_dependency_source/resolvelib/resolvelib.pyc
 ${PYSITELIB}/pip_audit/_fix.py
 ${PYSITELIB}/pip_audit/_fix.pyc
 ${PYSITELIB}/pip_audit/_format/__init__.py

Index: pkgsrc/security/py-pip-audit/distinfo
diff -u pkgsrc/security/py-pip-audit/distinfo:1.19 pkgsrc/security/py-pip-audit/distinfo:1.20
--- pkgsrc/security/py-pip-audit/distinfo:1.19  Thu Mar 16 08:48:02 2023
+++ pkgsrc/security/py-pip-audit/distinfo       Sun Mar 19 07:18:43 2023
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.19 2023/03/16 08:48:02 adam Exp $
+$NetBSD: distinfo,v 1.20 2023/03/19 07:18:43 wiz Exp $
 
-BLAKE2s (pip_audit-2.4.14.tar.gz) = a7bf015e61521f34ecaa49d5f00c2d86d79be58d428c02dd83cc3f0afdf4a2f4
-SHA512 (pip_audit-2.4.14.tar.gz) = c4c21b3b1863c10a7917ab957c646022901e70b5d580c22217cd2b32269380a75ef671cdafea4a941f35e88004a2cd04082defba1d713decb26968ad941cd818
-Size (pip_audit-2.4.14.tar.gz) = 75131 bytes
+BLAKE2s (pip_audit-2.5.1.tar.gz) = 7ef7dffa97bba633582feeff4383570cefccad0444afb8bc1dedfa3fb32bdaa6
+SHA512 (pip_audit-2.5.1.tar.gz) = 429475348cf92cad0c0c64dfd5f92c679fe6c79900f6ba369a4558c29fd5a1a7c469197770a47d34c2248d3225fbc8a538464a654bef92013fe035a754c718dd
+Size (pip_audit-2.5.1.tar.gz) = 66384 bytes