CVS commit: pkgsrc/net/py-zeep

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun 22 09:44:57 UTC 2026

Modified Files:
        pkgsrc/net/py-zeep: Makefile distinfo

Log Message:
py-zeep: updated to 4.3.3

4.3.3

- Wire up the ``forbid_external`` setting (previously defined but unused
  since the move off ``defusedxml`` in 4.0). When enabled it refuses to
  transitively fetch ``http``/``https`` resources via ``xsd:import``,
  ``xsd:include``, ``wsdl:import`` or lxml entity resolution, raising
  ``zeep.exceptions.ExternalReferenceForbidden``. The user-supplied
  entry-point WSDL/schema URL is still loaded. The default remains
  ``False`` to preserve existing behaviour; enable when loading WSDLs from
  untrusted sources to mitigate SSRF via attacker-controlled import
  targets.
- Internal tooling only: migrate dependency/build management to uv and
  replace isort/flake8/black with ruff. No runtime changes.


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.25 pkgsrc/net/py-zeep/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/net/py-zeep/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/py-zeep/Makefile
diff -u pkgsrc/net/py-zeep/Makefile:1.24 pkgsrc/net/py-zeep/Makefile:1.25
--- pkgsrc/net/py-zeep/Makefile:1.24    Thu Oct  9 07:57:53 2025
+++ pkgsrc/net/py-zeep/Makefile Mon Jun 22 09:44:57 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.24 2025/10/09 07:57:53 wiz Exp $
+# $NetBSD: Makefile,v 1.25 2026/06/22 09:44:57 adam Exp $
 
-DISTNAME=      zeep-4.3.2
+DISTNAME=      zeep-4.3.3
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    net python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=z/zeep/}
@@ -15,7 +15,6 @@ DEPENDS+=     ${PYPKGPREFIX}-attrs>=17.2.0:.
 DEPENDS+=      ${PYPKGPREFIX}-isodate>=0.5.4:../../time/py-isodate
 DEPENDS+=      ${PYPKGPREFIX}-lxml>=4.6.0:../../textproc/py-lxml
 DEPENDS+=      ${PYPKGPREFIX}-platformdirs>=1.4.0:../../misc/py-platformdirs
-DEPENDS+=      ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz
 DEPENDS+=      ${PYPKGPREFIX}-requests>=2.7.0:../../devel/py-requests
 DEPENDS+=      ${PYPKGPREFIX}-requests-file>=1.5.1:../../devel/py-requests-file
 DEPENDS+=      ${PYPKGPREFIX}-requests-toolbelt>=0.7.1:../../devel/py-requests-toolbelt

Index: pkgsrc/net/py-zeep/distinfo
diff -u pkgsrc/net/py-zeep/distinfo:1.14 pkgsrc/net/py-zeep/distinfo:1.15
--- pkgsrc/net/py-zeep/distinfo:1.14    Mon Sep 22 08:30:13 2025
+++ pkgsrc/net/py-zeep/distinfo Mon Jun 22 09:44:57 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.14 2025/09/22 08:30:13 adam Exp $
+$NetBSD: distinfo,v 1.15 2026/06/22 09:44:57 adam Exp $
 
-BLAKE2s (zeep-4.3.2.tar.gz) = b1b2d2a37eb6ac525235e581ed4ab318b220a1394173790ee976baa2ca8b4e9b
-SHA512 (zeep-4.3.2.tar.gz) = 512260a81c22b55b7fec4629b10cda775883f5bdfb40bda8ff8fdd6deff7bfe594cdb0919dac405a4eeff5e19f8a3c5906cb542760773971b2f43e03e3bdb313
-Size (zeep-4.3.2.tar.gz) = 166687 bytes
+BLAKE2s (zeep-4.3.3.tar.gz) = e8e2f62f1f87a2c8b14786bc058d8cc1383ea0733a6589355eccc5373f3472f0
+SHA512 (zeep-4.3.3.tar.gz) = 19985e823d4467ad728f97e87cb90812faad56e7ad92480574d28642f166769b30ab32217b6607900f6738b10cca65752059e6913898faa9f5e99ed46103d8ec
+Size (zeep-4.3.3.tar.gz) = 167372 bytes