CVS commit: pkgsrc/www/py-tornado

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu May 22 05:59:40 UTC 2025

Modified Files:
        pkgsrc/www/py-tornado: Makefile distinfo

Log Message:
py-tornado: updated to 6.5

Tornado 6.5.0

Security Improvements

Previously, malformed multipart-form-data requests could log multiple warnings and constitute a denial-of-service attack. Now an exception is raised at the first error, so there is only one log 
message per request. This fixes CVE-2025-47287.

General Changes

Python 3.14 is now supported. Older versions of Tornado will work on Python 3.14 but may log deprecation warnings.
The free-threading mode of Python 3.13 is now supported on an experimental basis. Prebuilt wheels are not yet available for this configuration, but it can be built from source.
The minimum supported Python version is 3.9.

Deprecation Notices

Support for obs-fold continuation lines in HTTP headers is deprecated and will be removed in Tornado 7.0, as is the use of carriage returns without line feeds as header separators.
The callback argument to websocket_connect is deprecated and will be removed in Tornado 7.0. Note that on_message_callback is not deprecated.
The log_message and args attributes of tornado.web.HTTPError are deprecated. Use the new get_message method instead.


To generate a diff of this commit:
cvs rdiff -u -r1.41 -r1.42 pkgsrc/www/py-tornado/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/www/py-tornado/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-tornado/Makefile
diff -u pkgsrc/www/py-tornado/Makefile:1.41 pkgsrc/www/py-tornado/Makefile:1.42
--- pkgsrc/www/py-tornado/Makefile:1.41 Mon Apr 14 20:28:03 2025
+++ pkgsrc/www/py-tornado/Makefile      Thu May 22 05:59:40 2025
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.41 2025/04/14 20:28:03 adam Exp $
+# $NetBSD: Makefile,v 1.42 2025/05/22 05:59:40 adam Exp $
 
-DISTNAME=      tornado-6.4.2
+DISTNAME=      tornado-6.5
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=   1
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=t/tornado/}
 

Index: pkgsrc/www/py-tornado/distinfo
diff -u pkgsrc/www/py-tornado/distinfo:1.29 pkgsrc/www/py-tornado/distinfo:1.30
--- pkgsrc/www/py-tornado/distinfo:1.29 Fri Nov 22 08:25:28 2024
+++ pkgsrc/www/py-tornado/distinfo      Thu May 22 05:59:40 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.29 2024/11/22 08:25:28 adam Exp $
+$NetBSD: distinfo,v 1.30 2025/05/22 05:59:40 adam Exp $
 
-BLAKE2s (tornado-6.4.2.tar.gz) = b1fadb3673f9ea2e4638f9482707f13a4e86e9715e3cefe5f2318e1d420a9264
-SHA512 (tornado-6.4.2.tar.gz) = 4f4556f0f7db8e13a101254693f92841374114912960d9874948548452cc9b38933292c0e37971fb151a4d9dbcf5ed7563c1505e090a1aef306f1c46f351534d
-Size (tornado-6.4.2.tar.gz) = 501135 bytes
+BLAKE2s (tornado-6.5.tar.gz) = e5f9561faf3377e33f4dc499604119106267bd4173abc7862402d97c750a2a15
+SHA512 (tornado-6.5.tar.gz) = 30c5caa80fcf7d39bee61f58d7940c57cd1834e0f519501dee49b86a3a00122c1a105205a8edb414b39b6088d217e2628fcd9c8c76b1fceddd81ce087aa31f0a
+Size (tornado-6.5.tar.gz) = 508968 bytes