CVS commit: pkgsrc/devel/py-mako

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun May  3 14:52:31 UTC 2026

Modified Files:
        pkgsrc/devel/py-mako: Makefile distinfo

Log Message:
py-mako: update to 1.3.12.

    :version: 1.3.12
    :released: Tue Apr 28 2026

    .. change::
        :tags: bug, template
        :tickets: 435

        Fixed issue in :class:`.TemplateLookup` where a URI with backslash path
        separators (e.g. ``\..\secret.txt``) could bypass the directory traversal
        check on Windows, allowing reads of arbitrary files outside of the template
        directory.  Backslash characters in URIs are now normalized to forward
        slashes before path resolution.


To generate a diff of this commit:
cvs rdiff -u -r1.40 -r1.41 pkgsrc/devel/py-mako/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/devel/py-mako/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-mako/Makefile
diff -u pkgsrc/devel/py-mako/Makefile:1.40 pkgsrc/devel/py-mako/Makefile:1.41
--- pkgsrc/devel/py-mako/Makefile:1.40  Sun Apr 19 17:19:19 2026
+++ pkgsrc/devel/py-mako/Makefile       Sun May  3 14:52:31 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.40 2026/04/19 17:19:19 wiz Exp $
+# $NetBSD: Makefile,v 1.41 2026/05/03 14:52:31 wiz Exp $
 
-DISTNAME=      mako-1.3.11
+DISTNAME=      mako-1.3.12
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=M/Mako/}

Index: pkgsrc/devel/py-mako/distinfo
diff -u pkgsrc/devel/py-mako/distinfo:1.33 pkgsrc/devel/py-mako/distinfo:1.34
--- pkgsrc/devel/py-mako/distinfo:1.33  Sun Apr 19 17:19:19 2026
+++ pkgsrc/devel/py-mako/distinfo       Sun May  3 14:52:31 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.33 2026/04/19 17:19:19 wiz Exp $
+$NetBSD: distinfo,v 1.34 2026/05/03 14:52:31 wiz Exp $
 
-BLAKE2s (mako-1.3.11.tar.gz) = dcf85bca2f43fced4f84efb516dd25786d451f6d3049a00919a03f24bc985081
-SHA512 (mako-1.3.11.tar.gz) = b3f0980393af9d9ceaf7421118fa13680ba3f47e1ff6e86a62bb8f8e944364ac8150a20b47d02bc391f7b9c9b6d400d153c3d70730cc36d1a87f628f0cff250c
-Size (mako-1.3.11.tar.gz) = 399811 bytes
+BLAKE2s (mako-1.3.12.tar.gz) = 20288a291eb02f42d2d04703caf18b462018d5c2320ce659bcbe404dd087a4e2
+SHA512 (mako-1.3.12.tar.gz) = 405de95c7656e00458015b84131e8b32d399c4d8f738af690ab34d21b2f57113d2736b7e91d862175bebf578191f62d49fae3533a65c2e469abc36cb1d95b886
+Size (mako-1.3.12.tar.gz) = 400219 bytes