CVS commit: pkgsrc/devel/py-cbor2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sun Jul  5 10:15:51 UTC 2026

Modified Files:
        pkgsrc/devel/py-cbor2: Makefile PLIST cargo-depends.mk distinfo

Log Message:
py-cbor2: updated to 6.1.3

6.1.3 (2026-07-04)

- Fixed the decoder registering 6-byte strings in the string reference namespace at indices
  65536–4294967295 where the encoder does not, desynchronising the namespace and resolving later
  string references to the wrong value
- Fixed the IPv4/IPv6 network decoders (tags 52 and 54) silently truncating an address byte string
  that is longer than the address size instead of rejecting it as malformed
- Fixed quadratic decoding time for indefinite-length and large definite-length byte and text
  strings, caused by concatenating each chunk onto the accumulated result with ``+`` instead of
  building the result once
- Fixed ``datetime_as_timestamp`` encoding whole-second datetimes before 1970 or after 2106 as
  floats instead of integers, because the timestamp was narrowed through an unsigned 32-bit integer
- Fixed the encoder measuring text strings by code point count instead of UTF-8 byte length when
  deciding whether to add them to the string reference namespace, desynchronising it from the
  decoder (which counts bytes) and corrupting later string references for non-ASCII strings
- Fixed the decoder rejecting scoped IPv6 addresses (tag 54) with a ``CBORDecodeError`` reading
  ``invalid types in input array``; the encoder emits them as ``[address, null, zone id]`` but the
  decoder only handled the network and interface array forms, so a scoped
  :class:`~ipaddress.IPv6Address` could not be decoded back


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/devel/py-cbor2/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/devel/py-cbor2/PLIST
cvs rdiff -u -r1.1 -r1.2 pkgsrc/devel/py-cbor2/cargo-depends.mk
cvs rdiff -u -r1.17 -r1.18 pkgsrc/devel/py-cbor2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-cbor2/Makefile
diff -u pkgsrc/devel/py-cbor2/Makefile:1.19 pkgsrc/devel/py-cbor2/Makefile:1.20
--- pkgsrc/devel/py-cbor2/Makefile:1.19 Mon Jun  8 10:41:37 2026
+++ pkgsrc/devel/py-cbor2/Makefile      Sun Jul  5 10:15:51 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2026/06/08 10:41:37 adam Exp $
+# $NetBSD: Makefile,v 1.20 2026/07/05 10:15:51 adam Exp $
 
-DISTNAME=      cbor2-6.1.2
+DISTNAME=      cbor2-6.1.3
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cbor2/}

Index: pkgsrc/devel/py-cbor2/PLIST
diff -u pkgsrc/devel/py-cbor2/PLIST:1.5 pkgsrc/devel/py-cbor2/PLIST:1.6
--- pkgsrc/devel/py-cbor2/PLIST:1.5     Tue May 26 13:37:11 2026
+++ pkgsrc/devel/py-cbor2/PLIST Sun Jul  5 10:15:51 2026
@@ -1,10 +1,12 @@
-@comment $NetBSD: PLIST,v 1.5 2026/05/26 13:37:11 adam Exp $
+@comment $NetBSD: PLIST,v 1.6 2026/07/05 10:15:51 adam Exp $
 bin/cbor2-${PYVERSSUFFIX}
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
 ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
 ${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
 ${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE.txt
+${PYSITELIB}/${WHEEL_INFODIR}/scm_file_list.json
+${PYSITELIB}/${WHEEL_INFODIR}/scm_version.json
 ${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/cbor2/__init__.py
 ${PYSITELIB}/cbor2/__init__.pyc

Index: pkgsrc/devel/py-cbor2/cargo-depends.mk
diff -u pkgsrc/devel/py-cbor2/cargo-depends.mk:1.1 pkgsrc/devel/py-cbor2/cargo-depends.mk:1.2
--- pkgsrc/devel/py-cbor2/cargo-depends.mk:1.1  Tue May 26 13:37:11 2026
+++ pkgsrc/devel/py-cbor2/cargo-depends.mk      Sun Jul  5 10:15:51 2026
@@ -1,4 +1,4 @@
-# $NetBSD: cargo-depends.mk,v 1.1 2026/05/26 13:37:11 adam Exp $
+# $NetBSD: cargo-depends.mk,v 1.2 2026/07/05 10:15:51 adam Exp $
 
 CARGO_CRATE_DEPENDS+=  autocfg-1.5.0
 CARGO_CRATE_DEPENDS+=  bigdecimal-0.4.10
@@ -14,11 +14,12 @@ CARGO_CRATE_DEPENDS+=       num-traits-0.2.19
 CARGO_CRATE_DEPENDS+=  once_cell-1.21.3
 CARGO_CRATE_DEPENDS+=  portable-atomic-1.13.1
 CARGO_CRATE_DEPENDS+=  proc-macro2-1.0.106
-CARGO_CRATE_DEPENDS+=  pyo3-0.28.2
+CARGO_CRATE_DEPENDS+=  pyo3-0.29.0
 CARGO_CRATE_DEPENDS+=  pyo3-build-config-0.28.2
-CARGO_CRATE_DEPENDS+=  pyo3-ffi-0.28.2
-CARGO_CRATE_DEPENDS+=  pyo3-macros-0.28.2
-CARGO_CRATE_DEPENDS+=  pyo3-macros-backend-0.28.2
+CARGO_CRATE_DEPENDS+=  pyo3-build-config-0.29.0
+CARGO_CRATE_DEPENDS+=  pyo3-ffi-0.29.0
+CARGO_CRATE_DEPENDS+=  pyo3-macros-0.29.0
+CARGO_CRATE_DEPENDS+=  pyo3-macros-backend-0.29.0
 CARGO_CRATE_DEPENDS+=  quote-1.0.44
 CARGO_CRATE_DEPENDS+=  syn-2.0.117
 CARGO_CRATE_DEPENDS+=  target-lexicon-0.13.5

Index: pkgsrc/devel/py-cbor2/distinfo
diff -u pkgsrc/devel/py-cbor2/distinfo:1.17 pkgsrc/devel/py-cbor2/distinfo:1.18
--- pkgsrc/devel/py-cbor2/distinfo:1.17 Mon Jun  8 10:41:37 2026
+++ pkgsrc/devel/py-cbor2/distinfo      Sun Jul  5 10:15:51 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.17 2026/06/08 10:41:37 adam Exp $
+$NetBSD: distinfo,v 1.18 2026/07/05 10:15:51 adam Exp $
 
 BLAKE2s (autocfg-1.5.0.crate) = d9738bc6755bf80a73705691ef930ca883cd58e4a2d1162b5c0a09cdc7029304
 SHA512 (autocfg-1.5.0.crate) = f279856f234d39d369623576acf9546a1ca24d7fe449f36d4fb93ea75a7efaf2c4015b9616a69bbbed358c5e5882e16b045352f046aa4c049b3d13b1e8257b08
@@ -6,9 +6,9 @@ Size (autocfg-1.5.0.crate) = 18729 bytes
 BLAKE2s (bigdecimal-0.4.10.crate) = 9f463d819252ec820d657de9d8d95a73924071f13181255dbedcc0047ef2c235
 SHA512 (bigdecimal-0.4.10.crate) = 706b7e33a2b375fc84ab6b617382145dd65e38e361498774493fad240a399e5a5e5f948604c831e9ca65eaa36df12ec7197c51fc80487680849129775d9256fc
 Size (bigdecimal-0.4.10.crate) = 126514 bytes
-BLAKE2s (cbor2-6.1.2.tar.gz) = 09a238206e028dcd287f394fe88aab1b82fc1efc2b91e6005eba580a7eac1544
-SHA512 (cbor2-6.1.2.tar.gz) = 9e9f55d0e8dc6a913d316384563eb7da62e1e7cef97df3bcb104934567a94c41de3a8716633205cb5ed5eec593415a05c5b3b6d074ba2b8b1ec17c65294edd7b
-Size (cbor2-6.1.2.tar.gz) = 86760 bytes
+BLAKE2s (cbor2-6.1.3.tar.gz) = bbea2b8a4e51182138ad22875906eabd37bc57dec07b48cf46bcf790500b4f39
+SHA512 (cbor2-6.1.3.tar.gz) = 83416f8cce4c800f14b0538e7c03b4f45f4a72ceea2388e811d591ef441ec7df79512efcd0a2f79657ab1b8481217f7bd99f431307d0967a683601ced096fb66
+Size (cbor2-6.1.3.tar.gz) = 89503 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes
@@ -45,21 +45,24 @@ Size (portable-atomic-1.13.1.crate) = 19
 BLAKE2s (proc-macro2-1.0.106.crate) = d914a8fc313c5a898a0a9381a19dfbdfe9b94efba3f431759ea2c7ce43cd5362
 SHA512 (proc-macro2-1.0.106.crate) = b726e2c92af434bfa88cd4f53c3fe6db647503567675fb439890dee3d15f5111137e3242b28d164114ce081c10acf3fd11950753ddb349190c87ee04e7d97744
 Size (proc-macro2-1.0.106.crate) = 59765 bytes
-BLAKE2s (pyo3-0.28.2.crate) = bbfe44e1ee06a97e4870c444287eaf13f3bdcff4532d578fab2abda4816c8c79
-SHA512 (pyo3-0.28.2.crate) = fd4a03eb1cdfa40c1ed67b588cd4da31c90972f95c669b20a1099fb9304cd9506337f674e0bc9efd1d22a453162aac79a36ab18ca97eaca3515d640e2e9b923f
-Size (pyo3-0.28.2.crate) = 1202843 bytes
+BLAKE2s (pyo3-0.29.0.crate) = f25cfefac48e0d488a15bcace947cbedfae7afe57f1f7a142a5bc80ba8ed1609
+SHA512 (pyo3-0.29.0.crate) = e6822400de53ebcef4a14c899dc065abae621a126483873139f5eb850877c94f4bccee3a183d4e2a69eadcd3c3b82b0a6f3e1053d926b103be572329607f2f67
+Size (pyo3-0.29.0.crate) = 1241253 bytes
 BLAKE2s (pyo3-build-config-0.28.2.crate) = 28da1096825a46c99065b37d1cf669ed5fcbfd40c980b6c74dd8847909af4ba4
 SHA512 (pyo3-build-config-0.28.2.crate) = f9b4863baffdf474ba9121edc19323d91565dd1411acabda03a307c8aae4969657167a80e197d4c8656e711e424053aced6a1de7978cedd38815304835fc5dbb
 Size (pyo3-build-config-0.28.2.crate) = 35958 bytes
-BLAKE2s (pyo3-ffi-0.28.2.crate) = fb684d2a27a3e44457449f23241553f81c704d72de487082ca58559c03080f68
-SHA512 (pyo3-ffi-0.28.2.crate) = f6b4fdea320922b81395e593fe135fd4b4f483250fe94d84019c97a3a9f98b6e2122134e09613021f194782038ffea1d32d3c65b1458e15ce3021d39fd582738
-Size (pyo3-ffi-0.28.2.crate) = 80837 bytes
-BLAKE2s (pyo3-macros-0.28.2.crate) = b283a3c97ec502d08b1bc78e14561efa0e6aeac47db7efedde5fca59b3d853d7
-SHA512 (pyo3-macros-0.28.2.crate) = 7125a41bd5ceaa5c85a2ac5ed1bf07708cf95f58dd18a8ba9000a3139ebc06e90776b4254820410e940c80ed45f7c09165c8fe57d8f79069622849c6c0861bcb
-Size (pyo3-macros-0.28.2.crate) = 8960 bytes
-BLAKE2s (pyo3-macros-backend-0.28.2.crate) = e14604f118bf3c41e6e31c095c7a90b74d7d1b4af09e8a90adede8bf061fdd2b
-SHA512 (pyo3-macros-backend-0.28.2.crate) = 24203c47d91be9acc949cfc70ec8b4aa32e089275cf9b0061a9909f5e60895c56446692be0056e13cc4df8efc0698e0655626f9524241b54cd172d8a25e42f98
-Size (pyo3-macros-backend-0.28.2.crate) = 87939 bytes
+BLAKE2s (pyo3-build-config-0.29.0.crate) = e0e97f7d0ac4e5042975ecefea1e7c59b0f5703b9432798585b20246f1a21ea6
+SHA512 (pyo3-build-config-0.29.0.crate) = df77e8d7d5fe173749437ff6b90fa1703083377d515ab8a85dc77d9cac9c3fc331ede4b040f7e3694311ddb5adff577cf90c181a27c196ab93a4569e918fdea8
+Size (pyo3-build-config-0.29.0.crate) = 39616 bytes
+BLAKE2s (pyo3-ffi-0.29.0.crate) = 3af279f26061a985347a80550d7bee3255c334ae2a8ffcc7f67c1418b571e72f
+SHA512 (pyo3-ffi-0.29.0.crate) = baaf01d13ddc09316ba16b22e9ca15a67e5bda5b861ed7961c3393fd4692fc1c96952f81465d1dcb6531b9083f96c5630981b3d7802cb1ac2af67aafaffbec76
+Size (pyo3-ffi-0.29.0.crate) = 88184 bytes
+BLAKE2s (pyo3-macros-0.29.0.crate) = bfbee9072175b5300ed98357459423798f130a3333bd796de32009a725d9ba4b
+SHA512 (pyo3-macros-0.29.0.crate) = fb6633ac76229d2e0ad88d51136a9318f03823b27c700a62cfbc957b4c834985e2f4c0cdaf5ea5e9993ec9e8ce3d63cd6b3fb823f2a042e65186adbed78da7c2
+Size (pyo3-macros-0.29.0.crate) = 8915 bytes
+BLAKE2s (pyo3-macros-backend-0.29.0.crate) = 6b63621bf64ba16ae267df41057b1ac4fcc3f47c5ac6ef4cc4f55ccd3c0d798e
+SHA512 (pyo3-macros-backend-0.29.0.crate) = 13a7af3958c09969637827d97ab9bbc664c407dda9e4283afaf495757798cf6f84932468bc092160fa75211ce0aafe6efc657f3a390234d77a67362cfb31fe0f
+Size (pyo3-macros-backend-0.29.0.crate) = 91943 bytes
 BLAKE2s (quote-1.0.44.crate) = 09d1bf6552c75930a6136c2dd0788730041a1719a3d89c4c1fbf5031533bac5c
 SHA512 (quote-1.0.44.crate) = 6c1e9b31e0c8bd13cd865e6846dc243d88f2c057adeb8e674117bdcb46947219a6a352a6a50be1132c483f55331e6556275ac514513dbf017825c64e5d96010d
 Size (quote-1.0.44.crate) = 31629 bytes