CVS commit: [pkgsrc-2026Q2] pkgsrc/www/p5-Mojolicious

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Jul 16 21:13:41 UTC 2026

Modified Files:
        pkgsrc/www/p5-Mojolicious [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7185 - requested by taca
www/p5-Mojolicious: Security fix

Revisions pulled up:
- www/p5-Mojolicious/Makefile                                   1.160
- www/p5-Mojolicious/distinfo                                   1.144

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Jul 14 17:29:45 UTC 2026

   Modified Files:
        pkgsrc/www/p5-Mojolicious: Makefile distinfo

   Log Message:
   p5-Mojolicious: update to 9.48.

   9.48  2026-07-14
     - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh
       random value on every request, instead of being reused for the whole lifetime of a session.

   9.47  2026-07-05
     - Added support for the QUERY HTTP request method from RFC 10008.
     - Added query and query_p methods to Mojo::UserAgent.
     - Added query method to Mojolicious::Routes::Route.
     - Added query method to Mojolicious::Lite.
     - Added query_ok method to Test::Mojo.
     - Fixed a security issue where the pure-Perl implementation of Mojo::JSON could exhaust all available memory when
       decoding deeply nested data. Decoding is now limited to 512 levels of nesting, to match the default of
       Cpanel::JSON::XS.
     - Fixed a memory leak in Morbo. (heikojansen)
     - Fixed Mojo::File::list_tree to no longer follow symbolic links to directories.

   9.46  2026-06-04
     - Added random_bytes function to Mojo::Util. (leont)
     - Improved randomness for CSRF token generation. (leont)
     - Fixed tls_options handling in Mojo::IOLoop::TLS. (krauro)
     - Fixed spec compliance issue with attribute selectors in Mojo::DOM::CSS.

   9.45  2026-05-05
     - Fixed portability issue in WebSocket tests.

   9.44  2026-05-05
     - Fixed various spec compliance issues in Mojo::DOM.
     - Fixed permessage-deflate support in Mojo::Transaction::WebSocket to be more interoperable with non-spec compliant
       implementations.

   9.43  2026-05-04
     - Fixed punycode roundtrip bug in Mojo::Util.
     - Fixed Windows compatibility issues of Mojo::File::list_tree.


To generate a diff of this commit:
cvs rdiff -u -r1.159 -r1.159.4.1 pkgsrc/www/p5-Mojolicious/Makefile
cvs rdiff -u -r1.143 -r1.143.4.1 pkgsrc/www/p5-Mojolicious/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/p5-Mojolicious/Makefile
diff -u pkgsrc/www/p5-Mojolicious/Makefile:1.159 pkgsrc/www/p5-Mojolicious/Makefile:1.159.4.1
--- pkgsrc/www/p5-Mojolicious/Makefile:1.159    Sat Jan 31 01:50:13 2026
+++ pkgsrc/www/p5-Mojolicious/Makefile  Thu Jul 16 21:13:41 2026
@@ -1,13 +1,13 @@
-# $NetBSD: Makefile,v 1.159 2026/01/31 01:50:13 wen Exp $
+# $NetBSD: Makefile,v 1.159.4.1 2026/07/16 21:13:41 maya Exp $
 #
 # When updating this package, please upload the distfile
 # since they disappear immediately when new releases happen,
 # which is quite often.
 
-DISTNAME=      Mojolicious-9.42
+DISTNAME=      Mojolicious-9.48
 PKGNAME=       p5-${DISTNAME}
 CATEGORIES=    www perl5
-MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=Mojolicious/}
+MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/S/SR/SRI/}
 
 MAINTAINER=    rares.aioanei%gmail.com@localhost
 HOMEPAGE=      http://mojolicio.us/

Index: pkgsrc/www/p5-Mojolicious/distinfo
diff -u pkgsrc/www/p5-Mojolicious/distinfo:1.143 pkgsrc/www/p5-Mojolicious/distinfo:1.143.4.1
--- pkgsrc/www/p5-Mojolicious/distinfo:1.143    Sat Jan 31 01:50:13 2026
+++ pkgsrc/www/p5-Mojolicious/distinfo  Thu Jul 16 21:13:41 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.143 2026/01/31 01:50:13 wen Exp $
+$NetBSD: distinfo,v 1.143.4.1 2026/07/16 21:13:41 maya Exp $
 
-BLAKE2s (Mojolicious-9.42.tar.gz) = 9e17fc57effb09fc1ac9836c975a72ff40cd2cc5873f431fc2d5631d3d077c65
-SHA512 (Mojolicious-9.42.tar.gz) = 7ae852d6dc899a5cbf3c919baffea05955cf516fdabafe375ef4629d45223dbc50f484de74096cce6a04ce9c544e9723226506ab243e60c5c37aa1ac6de6d76b
-Size (Mojolicious-9.42.tar.gz) = 954148 bytes
+BLAKE2s (Mojolicious-9.48.tar.gz) = 2762af912041d81017eece0a86c72fe5b3b94fdfa0e426a05cde48bb4b5a90ed
+SHA512 (Mojolicious-9.48.tar.gz) = f9bd7e6af0017dc3895367a956c9b0273f011229c55a0efd010ea7497b7a54e37989f307df561cccf1a9abbebdeb45dc4d828f90f279927077fa3d243435bf2f
+Size (Mojolicious-9.48.tar.gz) = 966181 bytes