CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jun  7 13:25:09 UTC 2023

Modified Files:
        pkgsrc/lang/py38-html-docs: Makefile PLIST distinfo
        pkgsrc/lang/python38: PLIST dist.mk distinfo

Log Message:
python38 py38-html-docs: updated to 3.8.17

Python 3.8.17

Security
gh-103142: The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u to address several CVEs.
gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified.
gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler.
gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329. Patch by Illia Volochii.
gh-101727: Updated the OpenSSL version used in Windows and macOS binary release builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the OpenSSL 2023-02-07 security 
advisory.
gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when launching with shell=True. Patch by Eryk Sun, based on a patch by Oleg Iarygin.

Library
gh-103935: Use io.open_code() for files to be executed instead of raw open()
gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new a filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files 
outside the destination directory. See Extraction filters for details.
gh-101997: Upgrade pip wheel bundled with ensurepip (pip 23.0.1)

Build
gh-102306: [3.8] Avoid GHA CI macOS test_posix failure by using the appropriate macOS SDK.

Windows
gh-100180: Update Windows installer to OpenSSL 1.1.1s

macOS
gh-103142: Update macOS installer to use OpenSSL 1.1.1u.


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/py38-html-docs/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/py38-html-docs/PLIST
cvs rdiff -u -r1.19 -r1.20 pkgsrc/lang/py38-html-docs/distinfo
cvs rdiff -u -r1.13 -r1.14 pkgsrc/lang/python38/PLIST
cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/python38/dist.mk
cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/python38/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py38-html-docs/Makefile
diff -u pkgsrc/lang/py38-html-docs/Makefile:1.17 pkgsrc/lang/py38-html-docs/Makefile:1.18
--- pkgsrc/lang/py38-html-docs/Makefile:1.17    Wed Dec  7 11:52:00 2022
+++ pkgsrc/lang/py38-html-docs/Makefile Wed Jun  7 13:25:08 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.17 2022/12/07 11:52:00 adam Exp $
+# $NetBSD: Makefile,v 1.18 2023/06/07 13:25:08 adam Exp $
 
-VERS=          3.8.16
+VERS=          3.8.17
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py38-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py38-html-docs/PLIST
diff -u pkgsrc/lang/py38-html-docs/PLIST:1.9 pkgsrc/lang/py38-html-docs/PLIST:1.10
--- pkgsrc/lang/py38-html-docs/PLIST:1.9        Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/py38-html-docs/PLIST    Wed Jun  7 13:25:08 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2022/03/19 18:56:44 adam Exp $
+@comment $NetBSD: PLIST,v 1.10 2023/06/07 13:25:08 adam Exp $
 share/doc/python3.8/.buildinfo
 share/doc/python3.8/_downloads/6b45dc135219d1404be49d606589a11d/tzinfo_examples.py
 share/doc/python3.8/_images/hashlib-blake2-tree.png
@@ -487,7 +487,6 @@ share/doc/python3.8/_sources/whatsnew/3.
 share/doc/python3.8/_sources/whatsnew/changelog.rst.txt
 share/doc/python3.8/_sources/whatsnew/index.rst.txt
 share/doc/python3.8/_static/basic.css
-share/doc/python3.8/_static/caret-down.svg
 share/doc/python3.8/_static/changelog_search.js
 share/doc/python3.8/_static/classic.css
 share/doc/python3.8/_static/copybutton.js
@@ -505,9 +504,11 @@ share/doc/python3.8/_static/plus.png
 share/doc/python3.8/_static/py.png
 share/doc/python3.8/_static/py.svg
 share/doc/python3.8/_static/pydoctheme.css
+share/doc/python3.8/_static/pydoctheme_dark.css
 share/doc/python3.8/_static/pygments.css
 share/doc/python3.8/_static/searchtools.js
 share/doc/python3.8/_static/sidebar.js
+share/doc/python3.8/_static/themetoggle.js
 share/doc/python3.8/_static/underscore-1.3.1.js
 share/doc/python3.8/_static/underscore.js
 share/doc/python3.8/about.html

Index: pkgsrc/lang/py38-html-docs/distinfo
diff -u pkgsrc/lang/py38-html-docs/distinfo:1.19 pkgsrc/lang/py38-html-docs/distinfo:1.20
--- pkgsrc/lang/py38-html-docs/distinfo:1.19    Wed Dec  7 11:52:00 2022
+++ pkgsrc/lang/py38-html-docs/distinfo Wed Jun  7 13:25:08 2023
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.19 2022/12/07 11:52:00 adam Exp $
+$NetBSD: distinfo,v 1.20 2023/06/07 13:25:08 adam Exp $
 
-BLAKE2s (python-3.8.16-docs-html.tar.bz2) = a7de685c4bd4f7db5d549521485c9312300d899b2399f367b5cb1b383a62420c
-SHA512 (python-3.8.16-docs-html.tar.bz2) = aaffc1f4d56be0ff7fbd35c7ca690d9089f9686d957669852aff1406efad2bee52b2b965ffd652780da6048ff9d89e6bbc421e92588841b89d73af43ad4970fb
-Size (python-3.8.16-docs-html.tar.bz2) = 6697934 bytes
+BLAKE2s (python-3.8.17-docs-html.tar.bz2) = f6463779ea317208022e6433b4cfb6e0bcc38d6ff5867a55a87d03711637d038
+SHA512 (python-3.8.17-docs-html.tar.bz2) = ab29fc066df0edcaf40dab079cf8fcaa68b895da053ce9cf3d8d776510d804ccfb17ba04e5464ed5edaeb938aaac8aa51bba67c7c3dff80f65cc67bd2d902a1a
+Size (python-3.8.17-docs-html.tar.bz2) = 6737444 bytes

Index: pkgsrc/lang/python38/PLIST
diff -u pkgsrc/lang/python38/PLIST:1.13 pkgsrc/lang/python38/PLIST:1.14
--- pkgsrc/lang/python38/PLIST:1.13     Wed Sep  7 15:32:34 2022
+++ pkgsrc/lang/python38/PLIST  Wed Jun  7 13:25:08 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.13 2022/09/07 15:32:34 adam Exp $
+@comment $NetBSD: PLIST,v 1.14 2023/06/07 13:25:08 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -1405,6 +1405,7 @@ lib/python${PY_VER_SUFFIX}/ensurepip/__m
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyc
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyo
 lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-22.0.4-py3-none-any.whl
+lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/setuptools-56.0.0-py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.py
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.pyc

Index: pkgsrc/lang/python38/dist.mk
diff -u pkgsrc/lang/python38/dist.mk:1.17 pkgsrc/lang/python38/dist.mk:1.18
--- pkgsrc/lang/python38/dist.mk:1.17   Wed Dec  7 11:52:00 2022
+++ pkgsrc/lang/python38/dist.mk        Wed Jun  7 13:25:08 2023
@@ -1,8 +1,8 @@
-# $NetBSD: dist.mk,v 1.17 2022/12/07 11:52:00 adam Exp $
+# $NetBSD: dist.mk,v 1.18 2023/06/07 13:25:08 adam Exp $
 
-PY_DISTVERSION=        3.8.16
+PY_DISTVERSION=        3.8.17
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python38/distinfo
 PATCHDIR=      ${.CURDIR}/../../lang/python38/patches
-MASTER_SITES=  http://www.python.org/ftp/python/${PY_DISTVERSION}/
+MASTER_SITES=  https://www.python.org/ftp/python/${PY_DISTVERSION}/

Index: pkgsrc/lang/python38/distinfo
diff -u pkgsrc/lang/python38/distinfo:1.30 pkgsrc/lang/python38/distinfo:1.31
--- pkgsrc/lang/python38/distinfo:1.30  Wed Dec  7 11:52:00 2022
+++ pkgsrc/lang/python38/distinfo       Wed Jun  7 13:25:08 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.30 2022/12/07 11:52:00 adam Exp $
+$NetBSD: distinfo,v 1.31 2023/06/07 13:25:08 adam Exp $
 
-BLAKE2s (Python-3.8.16.tar.xz) = 81247a2d04d1f2bad19ca2a0c374237ab1bebb013aa7cdaafa83fe4d2e873c73
-SHA512 (Python-3.8.16.tar.xz) = d206e80806409410c00ef8acd8c3d90e3cc9553f996d0a57faa63802f2415e9d7591542b2e84b5e8e79245f40f6478790b5ba2acf1da98ebbc9495999183f7fd
-Size (Python-3.8.16.tar.xz) = 19046724 bytes
+BLAKE2s (Python-3.8.17.tar.xz) = 508faca087976f569823fecd8ca464398c26c2027b68a345d1ee122e9ddfd1c0
+SHA512 (Python-3.8.17.tar.xz) = bc7e02acfebba86e4394f02195993500fac9347a52c7b49727eb0cdda38786ae917234272872d75effaddb042810d9682ef5627b0cc199f8aa0d5d3e315ddc0e
+Size (Python-3.8.17.tar.xz) = 20696584 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69