CVS commit: pkgsrc/textproc/dasel

["Marcin Gondek" <drixter%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   drixter
Date:           Sun Jun 28 11:07:03 UTC 2026

Modified Files:
        pkgsrc/textproc/dasel: Makefile distinfo go-modules.mk

Log Message:
textproc/dasel: Update to 3.11.2

## [v3.11.2] - 2026-06-27

### Security

- Fixed panic (index out of range) in the selector lexer when the input ends
with whitespace, e.g. `dasel query 'a '` ([GHSA-65gg-g7rw-6cpc]
(https://github.com/TomWright/dasel/security/advisories/GHSA-65gg-g7rw-6cpc)).
The whitespace-skip loop could advance the position to the end of input,
after which the next character access had no bounds check.


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/textproc/dasel/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/textproc/dasel/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/textproc/dasel/go-modules.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/dasel/Makefile
diff -u pkgsrc/textproc/dasel/Makefile:1.30 pkgsrc/textproc/dasel/Makefile:1.31
--- pkgsrc/textproc/dasel/Makefile:1.30 Tue Jun 23 11:44:04 2026
+++ pkgsrc/textproc/dasel/Makefile      Sun Jun 28 11:07:02 2026
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile,v 1.30 2026/06/23 11:44:04 wiz Exp $
+# $NetBSD: Makefile,v 1.31 2026/06/28 11:07:02 drixter Exp $
 
-DISTNAME=      dasel-3.11.1
+DISTNAME=      dasel-3.11.2
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=TomWright/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
 
-MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+MAINTAINER=    drixter%e-utp.net@localhost
 HOMEPAGE=      https://github.com/TomWright/dasel/
 COMMENT=       Select, put and delete data from JSON, TOML, YAML, XML and CSV
 LICENSE=       mit

Index: pkgsrc/textproc/dasel/distinfo
diff -u pkgsrc/textproc/dasel/distinfo:1.13 pkgsrc/textproc/dasel/distinfo:1.14
--- pkgsrc/textproc/dasel/distinfo:1.13 Tue Jun 23 11:44:04 2026
+++ pkgsrc/textproc/dasel/distinfo      Sun Jun 28 11:07:02 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.13 2026/06/23 11:44:04 wiz Exp $
+$NetBSD: distinfo,v 1.14 2026/06/28 11:07:02 drixter Exp $
 
-BLAKE2s (dasel-3.11.1.tar.gz) = b34d26fbfd3589891f7b7e0c48a1048721c3fe010de03d7312e3bdc65ae3688f
-SHA512 (dasel-3.11.1.tar.gz) = 61064d9b9d9df3eca33d1c14640f0c1840ac64caef8c8ed2235b0d38d085a9ce583fef9af90d05b10b44ce1daf0e85d07465ffb388c67a95d2ae24b9e7d36628
-Size (dasel-3.11.1.tar.gz) = 3180272 bytes
+BLAKE2s (dasel-3.11.2.tar.gz) = cbf201d8200fbf6efc77664987b4026a2ffc7141ce5b0d21a2d3567f90319b81
+SHA512 (dasel-3.11.2.tar.gz) = 89802000dde095f60530e9b13be69f14fc7923bd2288da4f63d5da0e9c90f04d71e38ceb839a67e6fec3d6966dfb77141fec9fa654328885b6dc29a2efc947e8
+Size (dasel-3.11.2.tar.gz) = 3180667 bytes
 BLAKE2s (github.com_agext_levenshtein_@v_v1.2.1.mod) = c9ffb48293dfe0abeca1b0ec1a4cb6d32ea841d9300ef233e40db5a1acef022d
 SHA512 (github.com_agext_levenshtein_@v_v1.2.1.mod) = b84b0edbabf81d86e47e159c035e900dfb0a2d640ef0f3eb6cd7c1934a301ef146492fee7742295ee0942f1cd41c175dd059d269b10780d5f11c18e405cce605
 Size (github.com_agext_levenshtein_@v_v1.2.1.mod) = 36 bytes

Index: pkgsrc/textproc/dasel/go-modules.mk
diff -u pkgsrc/textproc/dasel/go-modules.mk:1.5 pkgsrc/textproc/dasel/go-modules.mk:1.6
--- pkgsrc/textproc/dasel/go-modules.mk:1.5     Thu Apr 30 18:37:30 2026
+++ pkgsrc/textproc/dasel/go-modules.mk Sun Jun 28 11:07:02 2026
@@ -1,4 +1,4 @@
-# $NetBSD: go-modules.mk,v 1.5 2026/04/30 18:37:30 wiz Exp $
+# $NetBSD: go-modules.mk,v 1.6 2026/06/28 11:07:02 drixter Exp $
 
 GO_MODULE_FILES+=      github.com/agext/levenshtein/@v/v1.2.1.mod
 GO_MODULE_FILES+=      github.com/agext/levenshtein/@v/v1.2.1.zip