CVS commit: pkgsrc/textproc/dasel

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Jun 23 11:44:04 UTC 2026

Modified Files:
        pkgsrc/textproc/dasel: Makefile distinfo

Log Message:
dasel: update to 3.11.1.

## [v3.11.1] - 2026-06-20

### Security

- Fixed stack overflow (unrecoverable `fatal error`) in the JSON and XML readers when parsing deeply nested input 
([GHSA-cqxr-jxr2-85pq](https://github.com/TomWright/dasel/security/advisories/GHSA-cqxr-jxr2-85pq)). Both readers now enforce a 10,000-level nesting depth limit and return a clean error 
(`ErrJSONMaxDepthExceeded` / `ErrXMLMaxDepthExceeded`) instead of crashing the process.


To generate a diff of this commit:
cvs rdiff -u -r1.29 -r1.30 pkgsrc/textproc/dasel/Makefile
cvs rdiff -u -r1.12 -r1.13 pkgsrc/textproc/dasel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/dasel/Makefile
diff -u pkgsrc/textproc/dasel/Makefile:1.29 pkgsrc/textproc/dasel/Makefile:1.30
--- pkgsrc/textproc/dasel/Makefile:1.29 Fri Jun  5 10:21:52 2026
+++ pkgsrc/textproc/dasel/Makefile      Tue Jun 23 11:44:04 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.29 2026/06/05 10:21:52 bsiegert Exp $
+# $NetBSD: Makefile,v 1.30 2026/06/23 11:44:04 wiz Exp $
 
-DISTNAME=      dasel-3.11.0
-PKGREVISION=   1
+DISTNAME=      dasel-3.11.1
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=TomWright/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/textproc/dasel/distinfo
diff -u pkgsrc/textproc/dasel/distinfo:1.12 pkgsrc/textproc/dasel/distinfo:1.13
--- pkgsrc/textproc/dasel/distinfo:1.12 Sun May 24 18:19:02 2026
+++ pkgsrc/textproc/dasel/distinfo      Tue Jun 23 11:44:04 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.12 2026/05/24 18:19:02 wiz Exp $
+$NetBSD: distinfo,v 1.13 2026/06/23 11:44:04 wiz Exp $
 
-BLAKE2s (dasel-3.11.0.tar.gz) = ac1afefad0e350e493da05ce9dd1f030e083895d2fe6b359c401b2cc2d975d06
-SHA512 (dasel-3.11.0.tar.gz) = 3b65cfd7bc353e3584c333abaf191db820dbfbc7d5133c659465f02404ad328675134d6954b8659ede949527e47dab4a98930d56a4cc2bd214af0efd91aa969f
-Size (dasel-3.11.0.tar.gz) = 3179443 bytes
+BLAKE2s (dasel-3.11.1.tar.gz) = b34d26fbfd3589891f7b7e0c48a1048721c3fe010de03d7312e3bdc65ae3688f
+SHA512 (dasel-3.11.1.tar.gz) = 61064d9b9d9df3eca33d1c14640f0c1840ac64caef8c8ed2235b0d38d085a9ce583fef9af90d05b10b44ce1daf0e85d07465ffb388c67a95d2ae24b9e7d36628
+Size (dasel-3.11.1.tar.gz) = 3180272 bytes
 BLAKE2s (github.com_agext_levenshtein_@v_v1.2.1.mod) = c9ffb48293dfe0abeca1b0ec1a4cb6d32ea841d9300ef233e40db5a1acef022d
 SHA512 (github.com_agext_levenshtein_@v_v1.2.1.mod) = b84b0edbabf81d86e47e159c035e900dfb0a2d640ef0f3eb6cd7c1934a301ef146492fee7742295ee0942f1cd41c175dd059d269b10780d5f11c18e405cce605
 Size (github.com_agext_levenshtein_@v_v1.2.1.mod) = 36 bytes