CVS commit: pkgsrc/devel/py-pip

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Feb  2 16:10:43 UTC 2025

Modified Files:
        pkgsrc/devel/py-pip: Makefile PLIST distinfo

Log Message:
py-pip: update to 25.0.

25.0 (2025-01-26)
=================

Deprecations and Removals
-------------------------

- Deprecate the ``no-python-version-warning`` flag as it has long done nothing
  since Python 2 support was removed in pip 21.0. (`#13154 <https://github.com/pypa/pip/issues/13154>`_)

Features
--------

- Prefer to display :pep:`639` ``License-Expression`` in ``pip show`` if metadata version is at least 2.4. (`#13112 <https://github.com/pypa/pip/issues/13112>`_)
- Support :pep:`639` ``License-Expression`` and ``License-File`` metadata fields in JSON
  output. ``pip inspect`` and ``pip install --report`` now emit
  ``license_expression`` and ``license_file`` fields in the ``metadata`` object,
  if the corresponding fields are present in the installed ``METADATA`` file. (`#13134 <https://github.com/pypa/pip/issues/13134>`_)
- Files in the network cache will inherit the read/write permissions of pip's cache
  directory (in addition to the current user retaining read/write access). This
  enables a single cache to be shared among multiple users. (`#11012 <https://github.com/pypa/pip/issues/11012>`_)
- Return the size, along with the number, of files cleared on ``pip cache purge`` and ``pip cache remove`` (`#12176 <https://github.com/pypa/pip/issues/12176>`_)
- Cache ``python-requires`` checks while filtering potential installation candidates. (`#13128 <https://github.com/pypa/pip/issues/13128>`_)
- Optimize package collection by avoiding unnecessary URL parsing and other processing. (`#13132 <https://github.com/pypa/pip/issues/13132>`_)

Bug Fixes
---------

- Reorder the encoding detection when decoding a requirements file, relying on
  UTF-8 over the locale encoding by default, matching the documented behaviour.
  (`#12771 <https://github.com/pypa/pip/issues/12771>`_)
- The pip version self check is disabled on ``EXTERNALLY-MANAGED`` environments. (`#11820 <https://github.com/pypa/pip/issues/11820>`_)
- Fix a security bug allowing a specially crafted wheel to execute code during
  installation. (`#13079 <https://github.com/pypa/pip/issues/13079>`_)
- The inclusion of ``packaging`` 24.2 changes how pre-release specifiers with ``<`` and ``>``
  behave. Including a pre-release version with these specifiers now implies
  accepting pre-releases (e.g., ``<2.0dev`` can include ``1.0rc1``). To avoid
  implying pre-releases, avoid specifying them (e.g., use ``<2.0``).
  The exception is ``!=``, which never implies pre-releases. (`#13163 <https://github.com/pypa/pip/issues/13163>`_)
- The ``--cert`` and ``--client-cert`` command-line options are now respected while
  installing build dependencies. Consequently, the private ``_PIP_STANDALONE_CERT``
  environment variable is no longer used. (`#5502 <https://github.com/pypa/pip/issues/5502>`_)
- The ``--proxy`` command-line option is now respected while installing build dependencies. (`#6018 <https://github.com/pypa/pip/issues/6018>`_)

Vendored Libraries
------------------

- Upgrade CacheControl to 0.14.1
- Upgrade idna to 3.10
- Upgrade msgpack to 1.1.0
- Upgrade packaging to 24.2
- Upgrade platformdirs to 4.3.6
- Upgrade pyproject-hooks to 1.2.0
- Upgrade rich to 13.9.4
- Upgrade tomli to 2.2.1

Improved Documentation
----------------------

- Removed section about non-existing ``--force-keyring`` flag. (`#12455 <https://github.com/pypa/pip/issues/12455>`_)

Process
-------

- Started releasing to PyPI from a GitHub Actions CI/CD workflow that implements trusted publishing and bundles :pep:`740` digital attestations.


To generate a diff of this commit:
cvs rdiff -u -r1.79 -r1.80 pkgsrc/devel/py-pip/Makefile
cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/py-pip/PLIST
cvs rdiff -u -r1.66 -r1.67 pkgsrc/devel/py-pip/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-pip/Makefile
diff -u pkgsrc/devel/py-pip/Makefile:1.79 pkgsrc/devel/py-pip/Makefile:1.80
--- pkgsrc/devel/py-pip/Makefile:1.79   Mon Nov 11 07:28:18 2024
+++ pkgsrc/devel/py-pip/Makefile        Sun Feb  2 16:10:42 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.79 2024/11/11 07:28:18 wiz Exp $
+# $NetBSD: Makefile,v 1.80 2025/02/02 16:10:42 wiz Exp $
 
-DISTNAME=      pip-24.3.1
+DISTNAME=      pip-25.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pip/}

Index: pkgsrc/devel/py-pip/PLIST
diff -u pkgsrc/devel/py-pip/PLIST:1.44 pkgsrc/devel/py-pip/PLIST:1.45
--- pkgsrc/devel/py-pip/PLIST:1.44      Wed Jul 31 08:14:36 2024
+++ pkgsrc/devel/py-pip/PLIST   Sun Feb  2 16:10:42 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.44 2024/07/31 08:14:36 adam Exp $
+@comment $NetBSD: PLIST,v 1.45 2025/02/02 16:10:42 wiz Exp $
 bin/pip-${PYVERSSUFFIX}
 ${PYSITELIB}/${WHEEL_INFODIR}/AUTHORS.txt
 ${PYSITELIB}/${WHEEL_INFODIR}/LICENSE.txt
@@ -388,9 +388,6 @@ ${PYSITELIB}/pip/_internal/utils/direct_
 ${PYSITELIB}/pip/_internal/utils/egg_link.py
 ${PYSITELIB}/pip/_internal/utils/egg_link.pyc
 ${PYSITELIB}/pip/_internal/utils/egg_link.pyo
-${PYSITELIB}/pip/_internal/utils/encoding.py
-${PYSITELIB}/pip/_internal/utils/encoding.pyc
-${PYSITELIB}/pip/_internal/utils/encoding.pyo
 ${PYSITELIB}/pip/_internal/utils/entrypoints.py
 ${PYSITELIB}/pip/_internal/utils/entrypoints.pyc
 ${PYSITELIB}/pip/_internal/utils/entrypoints.pyo
@@ -624,6 +621,12 @@ ${PYSITELIB}/pip/_vendor/packaging/_stru
 ${PYSITELIB}/pip/_vendor/packaging/_tokenizer.py
 ${PYSITELIB}/pip/_vendor/packaging/_tokenizer.pyc
 ${PYSITELIB}/pip/_vendor/packaging/_tokenizer.pyo
+${PYSITELIB}/pip/_vendor/packaging/licenses/__init__.py
+${PYSITELIB}/pip/_vendor/packaging/licenses/__init__.pyc
+${PYSITELIB}/pip/_vendor/packaging/licenses/__init__.pyo
+${PYSITELIB}/pip/_vendor/packaging/licenses/_spdx.py
+${PYSITELIB}/pip/_vendor/packaging/licenses/_spdx.pyc
+${PYSITELIB}/pip/_vendor/packaging/licenses/_spdx.pyo
 ${PYSITELIB}/pip/_vendor/packaging/markers.py
 ${PYSITELIB}/pip/_vendor/packaging/markers.pyc
 ${PYSITELIB}/pip/_vendor/packaging/markers.pyo
@@ -785,9 +788,6 @@ ${PYSITELIB}/pip/_vendor/pygments/util.p
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/__init__.py
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/__init__.pyc
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/__init__.pyo
-${PYSITELIB}/pip/_vendor/pyproject_hooks/_compat.py
-${PYSITELIB}/pip/_vendor/pyproject_hooks/_compat.pyc
-${PYSITELIB}/pip/_vendor/pyproject_hooks/_compat.pyo
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_impl.py
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_impl.pyc
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_impl.pyo
@@ -797,6 +797,7 @@ ${PYSITELIB}/pip/_vendor/pyproject_hooks
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_in_process/_in_process.py
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_in_process/_in_process.pyc
 ${PYSITELIB}/pip/_vendor/pyproject_hooks/_in_process/_in_process.pyo
+${PYSITELIB}/pip/_vendor/pyproject_hooks/py.typed
 ${PYSITELIB}/pip/_vendor/requests/__init__.py
 ${PYSITELIB}/pip/_vendor/requests/__init__.pyc
 ${PYSITELIB}/pip/_vendor/requests/__init__.pyo

Index: pkgsrc/devel/py-pip/distinfo
diff -u pkgsrc/devel/py-pip/distinfo:1.66 pkgsrc/devel/py-pip/distinfo:1.67
--- pkgsrc/devel/py-pip/distinfo:1.66   Thu Oct 31 10:40:06 2024
+++ pkgsrc/devel/py-pip/distinfo        Sun Feb  2 16:10:42 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.66 2024/10/31 10:40:06 adam Exp $
+$NetBSD: distinfo,v 1.67 2025/02/02 16:10:42 wiz Exp $
 
-BLAKE2s (pip-24.3.1.tar.gz) = b1f637ab07aed3e7f82f99c6d5d54c871c6b53b49c6ea75bf37a29c7e15cac67
-SHA512 (pip-24.3.1.tar.gz) = 2fad7072473d67fa0dbfc2c060b1b4752ea1b0d021051ebef44a668e6c9c731a530b1afb38872fdbc2efec0598fae532e61a5ed545524875b51a3fe0a8d11d96
-Size (pip-24.3.1.tar.gz) = 1931073 bytes
+BLAKE2s (pip-25.0.tar.gz) = caa726ec594746bff72b66041c425c41c6f501b9ed65f828b443466750aca00d
+SHA512 (pip-25.0.tar.gz) = eccaba8f0d0e910fe91fb5036cbec8cbff48300c4b5443a7eff7164b0f59339f24db75034cc1a3e8360111198877baf1a348bbfb9e99449d45ee1d37afca5467
+Size (pip-25.0.tar.gz) = 1950328 bytes
 SHA1 (patch-src_pip___internal_build__env.py) = 19c6feb4b56cbdb70f9150c452dac73ca3949911
 SHA1 (patch-src_pip___internal_commands_install.py) = 2f78c5af7c677d052a2275488dcda2f7b86c6e51
 SHA1 (patch-src_pip___internal_operations_install_wheel.py) = 0f590d2a11a2373f50abbc9377044f728625b13d