CVS commit: pkgsrc/devel/py-cbor2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Apr 15 08:52:02 UTC 2026

Modified Files:
        pkgsrc/devel/py-cbor2: Makefile distinfo

Log Message:
py-cbor2: updated to 5.9.0

5.9.0 (2026-03-22)

- Added the ``max_depth`` decoder parameter to limit the maximum allowed nesting level of
  containers, with a default value of 400 levels (CVE-2026-26209)
- Changed the default ``read_size`` from 4096 to 1 for backwards compatibility.
  The buffered reads introduced in 5.8.0 could cause issues when code needs to
  access the stream position after decoding. Users can opt-in to faster decoding
  by passing ``read_size=4096`` when they don't need to access the stream directly
  after decoding. Added a direct read path for ``read_size=1`` to avoid buffer
  management overhead.
- Fixed C encoder not respecting string referencing when encoding string-type datetimes (tag 0)
- Fixed a missed check for an exception in the C implementation of ``CBOREncoder.encode_shared()``
- Fixed two reference/memory leaks in the C extension's long string decoder
- Fixed C decoder ignoring the ``str_errors`` setting when decoding strings, and improved
  string decoding performance by using stack allocation for small strings and eliminating
  unnecessary conditionals. Benchmarks show 9-17% faster deserialization.


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/py-cbor2/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/devel/py-cbor2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-cbor2/Makefile
diff -u pkgsrc/devel/py-cbor2/Makefile:1.16 pkgsrc/devel/py-cbor2/Makefile:1.17
--- pkgsrc/devel/py-cbor2/Makefile:1.16 Mon Jan  5 14:13:19 2026
+++ pkgsrc/devel/py-cbor2/Makefile      Wed Apr 15 08:52:01 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.16 2026/01/05 14:13:19 adam Exp $
+# $NetBSD: Makefile,v 1.17 2026/04/15 08:52:01 adam Exp $
 
-DISTNAME=      cbor2-5.8.0
+DISTNAME=      cbor2-5.9.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cbor2/}
@@ -15,9 +15,7 @@ TOOL_DEPENDS+=        ${PYPKGPREFIX}-setuptools
 TEST_DEPENDS+= ${PYPKGPREFIX}-hypothesis-[0-9]*:../../devel/py-hypothesis
 TEST_DEPENDS+= ${PYPKGPREFIX}-test-cov-[0-9]*:../../devel/py-test-cov
 
-post-install:
-       cd ${DESTDIR}${PREFIX}/bin && \
-       ${MV} cbor2 cbor2-${PYVERSSUFFIX} || ${TRUE}
+PY_RENAME_BINARIES=    cbor2
 
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/devel/py-cbor2/distinfo
diff -u pkgsrc/devel/py-cbor2/distinfo:1.14 pkgsrc/devel/py-cbor2/distinfo:1.15
--- pkgsrc/devel/py-cbor2/distinfo:1.14 Mon Jan  5 14:13:19 2026
+++ pkgsrc/devel/py-cbor2/distinfo      Wed Apr 15 08:52:01 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.14 2026/01/05 14:13:19 adam Exp $
+$NetBSD: distinfo,v 1.15 2026/04/15 08:52:01 adam Exp $
 
-BLAKE2s (cbor2-5.8.0.tar.gz) = bf7d0398706432c9e0ae283f903d22c6b88276297817380720645ca9097a9d86
-SHA512 (cbor2-5.8.0.tar.gz) = 19a79554526db6926421ec6520c589fd51530057226ca9479662f2eb9c8af6ebda2bf52d3d28c4597d3985585b3798d54f2b783e5bc6622610f91eea91f28547
-Size (cbor2-5.8.0.tar.gz) = 107825 bytes
+BLAKE2s (cbor2-5.9.0.tar.gz) = 8877612413e841eafcbfd37d3f2f915cfb24c4587a04de8bfa0c6f42df9fe412
+SHA512 (cbor2-5.9.0.tar.gz) = cafe5fc6aa55b899ca3edd012620f94bd02c47e45117bee9f0841dae9baba049339ac8642998b390b29c29b3102ca4a26718bc0c2569c35434b3622d439a6b51
+Size (cbor2-5.9.0.tar.gz) = 111231 bytes