CVS commit: pkgsrc/graphics/py-svglib

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jul 14 13:22:34 UTC 2026

Modified Files:
        pkgsrc/graphics/py-svglib: Makefile distinfo

Log Message:
py-svglib: updated to 2.0.2

2.0.2 (2026-06-18)

Supply-chain hygiene release — no code changes.

The 2.0.1 PyPI attestation was generated by a manual `workflow_dispatch` run
from `refs/heads/main` that raced ahead of the release event. As a result the
Sigstore certificate embedded in the PEP 740 attestation identified
`refs/heads/main` as the source rather than `refs/tags/v2.0.1`, making it
impossible to verify the package against the tagged commit. This release is
published exclusively via the `release: [published]` trigger so the attestation
identity is `refs/tags/v2.0.2`.

2.0.1 (2026-06-17)

Supply-chain hygiene release — no code changes.

This release replaces 2.0.0, which was published directly with `uv publish`
and therefore lacked the PEP 740 provenance attestation that was present in
1.6.0. Releases must be triggered via the GitHub Actions release workflow
(`publish-to-pypi.yml`), which uses PyPI Trusted Publishing (OIDC) to produce
a SLSA Level 3 attestation. Publishing locally — even with
`uv publish --trusted-publishing` — relies on a local OAuth identity and does
not meet that bar.

- Declare `pillow>=9.0.0` as a direct dependency; it was previously an
  undeclared transitive dependency pulled in by reportlab.

2.0.0 (2026-06-16)

Identical to 2.0b1 in terms of code; this release promotes the beta to a
stable release and converts the project documentation files from RST to
Markdown format.

2.0b1 (2026-05-26)

**Breaking change — output sizes will differ from 1.x.**

svglib now correctly maps SVG user units to ReportLab points using the
standard SVG/CSS conversion factor: 1 px = 0.75 pt (96 dpi). Previous
releases treated 1 user unit as 1 pt, which is 33 % too large. Any SVG
whose `width`/`height` or `viewBox` uses user units or `px` will
produce a PDF that is 75 % of its previous linear dimensions (same
proportions, correct physical size).


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/graphics/py-svglib/Makefile
cvs rdiff -u -r1.1 -r1.2 pkgsrc/graphics/py-svglib/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/py-svglib/Makefile
diff -u pkgsrc/graphics/py-svglib/Makefile:1.2 pkgsrc/graphics/py-svglib/Makefile:1.3
--- pkgsrc/graphics/py-svglib/Makefile:1.2      Sun Jun 28 15:41:25 2026
+++ pkgsrc/graphics/py-svglib/Makefile  Tue Jul 14 13:22:34 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2026/06/28 15:41:25 wiz Exp $
+# $NetBSD: Makefile,v 1.3 2026/07/14 13:22:34 adam Exp $
 
-DISTNAME=      svglib-1.6.0
+DISTNAME=      svglib-2.0.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    graphics python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=s/svglib/}
@@ -11,19 +11,19 @@ COMMENT=    Pure-Python library for reading
 LICENSE=       gnu-lgpl-v3
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-hatchling>0:../../devel/py-hatchling
+DEPENDS+=      ${PYPKGPREFIX}-Pillow>=9.0.0:../../graphics/py-Pillow
 DEPENDS+=      ${PYPKGPREFIX}-cssselect2>=0.2.0:../../textproc/py-cssselect2
 DEPENDS+=      ${PYPKGPREFIX}-lxml>=6.0.0:../../textproc/py-lxml
 DEPENDS+=      ${PYPKGPREFIX}-reportlab>=4.4.3:../../print/py-reportlab
-DEPENDS+=      ${PYPKGPREFIX}-rlpycairo>=0.4.0:../../print/py-rlpycairo
 DEPENDS+=      ${PYPKGPREFIX}-tinycss2>=0.6.0:../../textproc/py-tinycss2
+# bitmaps
+DEPENDS+=      ${PYPKGPREFIX}-rlpycairo>=0.4.0:../../print/py-rlpycairo
 
 USE_LANGUAGES= # none
 
-PYTHON_VERSIONS_INCOMPATIBLE=  310 311
+PY_RENAME_BINARIES=    svg2pdf
 
-post-install:
-       cd ${DESTDIR}${PREFIX}/bin && \
-       ${MV} svg2pdf svg2pdf-${PYVERSSUFFIX} || ${TRUE}
+PYTHON_VERSIONS_INCOMPATIBLE=  310 311
 
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/graphics/py-svglib/distinfo
diff -u pkgsrc/graphics/py-svglib/distinfo:1.1 pkgsrc/graphics/py-svglib/distinfo:1.2
--- pkgsrc/graphics/py-svglib/distinfo:1.1      Sun Dec 28 14:28:55 2025
+++ pkgsrc/graphics/py-svglib/distinfo  Tue Jul 14 13:22:34 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.1 2025/12/28 14:28:55 adam Exp $
+$NetBSD: distinfo,v 1.2 2026/07/14 13:22:34 adam Exp $
 
-BLAKE2s (svglib-1.6.0.tar.gz) = 320f08c04dcd75feb9cbe8870310f09ce344f9d5b70fdb2b6256bae43fa46e2f
-SHA512 (svglib-1.6.0.tar.gz) = 7d6e30629b409cbdf80de3278a6b7a67ae4a3d82cd83c6f53cb72c21b59839eafbef4d34989621744773f9c7ba47b6cbe86d8f8b222054ff016061a740bf2bc2
-Size (svglib-1.6.0.tar.gz) = 1318276 bytes
+BLAKE2s (svglib-2.0.2.tar.gz) = 6a89746f689dfe68d88a09aa78243e7c99d0fb8562530a3010e16402f85acb43
+SHA512 (svglib-2.0.2.tar.gz) = 695bd1aa17cd590c2d3bb5a4745d253d52b34f330c717c32ebaa8dceb13b5e442346f4fc848f962f16aa22cf6a2bde0eed2ef1466b76d7eb519487fab0fa3609
+Size (svglib-2.0.2.tar.gz) = 1341040 bytes