CVS commit: pkgsrc/devel/py-poetry

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Apr 14 13:30:32 UTC 2026

Modified Files:
        pkgsrc/devel/py-poetry: Makefile distinfo

Log Message:
py-poetry: updated to 2.3.4

2.3.4

Fix a performance regression in the wheel installer that was introduced in Poetry 2.3.3
Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory


To generate a diff of this commit:
cvs rdiff -u -r1.32 -r1.33 pkgsrc/devel/py-poetry/Makefile
cvs rdiff -u -r1.22 -r1.23 pkgsrc/devel/py-poetry/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-poetry/Makefile
diff -u pkgsrc/devel/py-poetry/Makefile:1.32 pkgsrc/devel/py-poetry/Makefile:1.33
--- pkgsrc/devel/py-poetry/Makefile:1.32        Mon Mar 30 08:53:33 2026
+++ pkgsrc/devel/py-poetry/Makefile     Tue Apr 14 13:30:31 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.32 2026/03/30 08:53:33 adam Exp $
+# $NetBSD: Makefile,v 1.33 2026/04/14 13:30:31 adam Exp $
 
-DISTNAME=      poetry-2.3.3
+DISTNAME=      poetry-2.3.4
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/poetry/}

Index: pkgsrc/devel/py-poetry/distinfo
diff -u pkgsrc/devel/py-poetry/distinfo:1.22 pkgsrc/devel/py-poetry/distinfo:1.23
--- pkgsrc/devel/py-poetry/distinfo:1.22        Mon Mar 30 08:53:33 2026
+++ pkgsrc/devel/py-poetry/distinfo     Tue Apr 14 13:30:32 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.22 2026/03/30 08:53:33 adam Exp $
+$NetBSD: distinfo,v 1.23 2026/04/14 13:30:32 adam Exp $
 
-BLAKE2s (poetry-2.3.3.tar.gz) = 0332f101dc8b939fc921cc010050bdd4e296ff02efc001e181e49853157f376b
-SHA512 (poetry-2.3.3.tar.gz) = ace6168aeb4f4ea89ce6c08f8ad2833baa115ba55e90580275774b2c999efa5299b4390778e74ad871a2c0eb43bf25e08d84f3a5bad97290b5970f3b503162d5
-Size (poetry-2.3.3.tar.gz) = 3465814 bytes
+BLAKE2s (poetry-2.3.4.tar.gz) = b0cfc1568d146e8e3445926357af3327c40b115a02f9509fb5a7e6edb839c3cd
+SHA512 (poetry-2.3.4.tar.gz) = 331e8225568e7080d22a4fe85520dedcf73db09aa7638d55e3af52df1104d1f8ea158b76197799ecbc792c4657bd88c87bcb759ab8225cb34aa467178371d503
+Size (poetry-2.3.4.tar.gz) = 3467967 bytes