CVS commit: pkgsrc/graphics/openimageio

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep  2 11:12:22 UTC 2026

Modified Files:
        pkgsrc/graphics/openimageio: Makefile PLIST buildlink3.mk distinfo

Log Message:
openimageio: updated to 3.1.17.0

3.1.17.0

raw: Add raw:thumbnail_index and raw:thumbnail_sort hints to select a specific embedded thumbnail, plus assorted thumbnail fixes and unit tests.
raw: Allow vector types in multi-value hints (white balance as a float4, cropbox/greybox as int2 boxes).
raw: Fix undebayered flip mapping, buffer bounds, and overflow issues.
exr: Convert mixed-native-integer-depth channels through proper rescaling instead of reinterpreting bytes when writing OpenEXR (also fixes copy_image and iconvert native fast paths).
oiiotool: More robust handling of failed reads: preserve the reader's specific error message instead of a generic "file not found", don't dereference specs of a failed read, and safer error message 
marshalling.
IBA: Detect iterator read errors in orientation functions (flip, flop, rotate90/180/270, transpose).
writers: Don't write thumbnail_* metadata to formats that can't hold a thumbnail.
readers: Use check_open() and check_compression_ratio() in all readers that lacked them, guarding against decompression bombs and implausible header dimensions.
bmp: Decompression-bomb guard, UB-safe height negation, and scanline bounds checks.
exif: Harden the shared Exif decoder against malformed input (affects all formats that embed Exif).
ffmpeg: Fix heap bounds, bad packet handling, add checks at open, and other fixes.
fits: Validate the NAXIS count against the permitted 0-999 range.
gif: Reject a short graphics-control extension block.
icc: Fix out-of-bounds pointer formation, use alignment-safe reads, and 64-bit tag bounds in the shared ICC profile decoder (jpeg, png, tiff, webp, jpeg2000, psd).
jpeg: More detection of corrupt files.
jpegxl: Harden against corrupt input.
pnm: Use 64-bit scanline math to avoid integer overflow.
psd: Harden reader against oversized/bomb headers and ZIP-layer buffer overflow.
ptex: Guard null face-data returns; add malformed-header tests.
rla: Terminate the subimage chain and bounds-check the offset table.
tiff: Hardening: prevent OOB read on failed raw-strip reads, 64-bit overflow protection.
xmp: Fix encode_xmp() for aliased metadata names such as IPTC:Rating / xmp:Rating.
zfile: Check gzread returns for truncated or corrupt input.
fix: When reading xmp, bound decode recursion and growth, escape encoder output.
fix: Fix ImageBuf error message with too few format arguments aborting.
fix: OpenColorIO exception safety improvements.
fix: Improve ImageSpec::default_channel_names nchannels safety.
simd.h: Fix NEON vfloat4::load(values,n) reading past the end of the buffer.
simd.h: Fill in missing NEON paths in simd.h.
simd.h: Treat Windows ARM64EC builds as ARM so the NEON path is taken.
filesystem.h: Use 64-bit file offsets on Windows.
threads.h: Annotate spin_mutex and spin_rw_mutex for ThreadSanitizer.
build: Fix declaration mismatch for unity builds on Windows.
build: Guard libtiff's missing Deflate target.
build: Fix CLANG_FORMAT_INCLUDES targets.
deps: Raise LibRaw recommended minimum to 0.21.3 (hard minimum still 0.20.0).
ci: Update all GHA actions to the latest versions.
docs: Correct Doxygen style comments in IOProxy.


To generate a diff of this commit:
cvs rdiff -u -r1.137 -r1.138 pkgsrc/graphics/openimageio/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/graphics/openimageio/PLIST
cvs rdiff -u -r1.86 -r1.87 pkgsrc/graphics/openimageio/buildlink3.mk
cvs rdiff -u -r1.44 -r1.45 pkgsrc/graphics/openimageio/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/openimageio/Makefile
diff -u pkgsrc/graphics/openimageio/Makefile:1.137 pkgsrc/graphics/openimageio/Makefile:1.138
--- pkgsrc/graphics/openimageio/Makefile:1.137  Mon Aug 24 08:42:21 2026
+++ pkgsrc/graphics/openimageio/Makefile        Wed Sep  2 11:12:22 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.137 2026/08/24 08:42:21 adam Exp $
+# $NetBSD: Makefile,v 1.138 2026/09/02 11:12:22 adam Exp $
 
-DISTNAME=      OpenImageIO-3.1.14.1
+DISTNAME=      OpenImageIO-3.1.17.0
 PKGNAME=       ${DISTNAME:tl}
-PKGREVISION=   3
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=AcademySoftwareFoundation/}
 GITHUB_PROJECT=        OpenImageIO
@@ -16,12 +15,13 @@ LICENSE=    modified-bsd
 UNLIMIT_RESOURCES=     datasize virtualsize
 
 USE_LANGUAGES= c c++
-USE_TOOLS+=    pkg-config
+USE_TOOLS+=    gmake pkg-config
 TEST_TARGET=   test
 TEST_ENV+=     LD_LIBRARY_PATH=${WRKSRC}/${CMAKE_BUILD_DIR}/lib
 # For Darwin
 TEST_ENV+=     DYLD_LIBRARY_PATH=${WRKSRC}/${CMAKE_BUILD_DIR}/lib
 
+CMAKE_CONFIGURE_ARGS+= -DOIIO_INTERNALIZE_FMT=OFF # problematic
 CMAKE_CONFIGURE_ARGS+= -DSTOP_ON_WARNING=OFF # Disable -Werror
 CMAKE_CONFIGURE_ARGS+= -DUSE_CCACHE=OFF
 CMAKE_CONFIGURE_ARGS+= -DUSE_EXTERNAL_PUGIXML=ON

Index: pkgsrc/graphics/openimageio/PLIST
diff -u pkgsrc/graphics/openimageio/PLIST:1.20 pkgsrc/graphics/openimageio/PLIST:1.21
--- pkgsrc/graphics/openimageio/PLIST:1.20      Sun Jun  7 06:12:11 2026
+++ pkgsrc/graphics/openimageio/PLIST   Wed Sep  2 11:12:22 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.20 2026/06/07 06:12:11 adam Exp $
+@comment $NetBSD: PLIST,v 1.21 2026/09/02 11:12:22 adam Exp $
 bin/iconvert
 bin/idiff
 bin/igrep
@@ -17,10 +17,6 @@ include/OpenImageIO/dassert.h
 include/OpenImageIO/deepdata.h
 include/OpenImageIO/detail/farmhash.h
 include/OpenImageIO/detail/fmt.h
-include/OpenImageIO/detail/fmt/base.h
-include/OpenImageIO/detail/fmt/chrono.h
-include/OpenImageIO/detail/fmt/core.h
-include/OpenImageIO/detail/fmt/format-inl.h
 include/OpenImageIO/detail/fmt/format.h
 include/OpenImageIO/detail/fmt/ostream.h
 include/OpenImageIO/detail/fmt/printf.h
@@ -76,10 +72,10 @@ lib/cmake/OpenImageIO/OpenImageIOTargets
 lib/cmake/OpenImageIO/OpenImageIOTargets.cmake
 lib/libOpenImageIO.so
 lib/libOpenImageIO.so.3.1
-lib/libOpenImageIO.so.3.1.14
+lib/libOpenImageIO.so.3.1.17
 lib/libOpenImageIO_Util.so
 lib/libOpenImageIO_Util.so.3.1
-lib/libOpenImageIO_Util.so.3.1.14
+lib/libOpenImageIO_Util.so.3.1.17
 lib/pkgconfig/OpenImageIO.pc
 share/doc/OpenImageIO/CHANGES-0.x.md
 share/doc/OpenImageIO/CHANGES-1.x.md

Index: pkgsrc/graphics/openimageio/buildlink3.mk
diff -u pkgsrc/graphics/openimageio/buildlink3.mk:1.86 pkgsrc/graphics/openimageio/buildlink3.mk:1.87
--- pkgsrc/graphics/openimageio/buildlink3.mk:1.86      Mon Aug 24 08:42:21 2026
+++ pkgsrc/graphics/openimageio/buildlink3.mk   Wed Sep  2 11:12:22 2026
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.86 2026/08/24 08:42:21 adam Exp $
+# $NetBSD: buildlink3.mk,v 1.87 2026/09/02 11:12:22 adam Exp $
 
 BUILDLINK_TREE+=       openimageio
 
@@ -25,6 +25,7 @@ BUILDLINK_FILES.openimageio+=         bin/testt
 .include "../../graphics/openjpeg/buildlink3.mk"
 .include "../../graphics/openexr/buildlink3.mk"
 .include "../../graphics/tiff/buildlink3.mk"
+.include "../../textproc/fmtlib/buildlink3.mk"
 .endif # OPENIMAGEIO_BUILDLINK3_MK
 
 BUILDLINK_TREE+=       -openimageio

Index: pkgsrc/graphics/openimageio/distinfo
diff -u pkgsrc/graphics/openimageio/distinfo:1.44 pkgsrc/graphics/openimageio/distinfo:1.45
--- pkgsrc/graphics/openimageio/distinfo:1.44   Mon Jun 22 16:57:50 2026
+++ pkgsrc/graphics/openimageio/distinfo        Wed Sep  2 11:12:22 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.44 2026/06/22 16:57:50 adam Exp $
+$NetBSD: distinfo,v 1.45 2026/09/02 11:12:22 adam Exp $
 
-BLAKE2s (OpenImageIO-3.1.14.1.tar.gz) = a2ce38657a1e99f10649fe52ce3965872ee5b5e5b5423f0862f20d578d1624a1
-SHA512 (OpenImageIO-3.1.14.1.tar.gz) = 2e775fe3e5075356a0745f41ce0c0c2fe0c5bd3456251e466b54bc0784cfddc1c195ceb1f23f7ff781b7e919bc65855dcc6082bb4bef10036575a1210291b8cf
-Size (OpenImageIO-3.1.14.1.tar.gz) = 55378934 bytes
+BLAKE2s (OpenImageIO-3.1.17.0.tar.gz) = d980ee1e522e5b188ce3607e498f23433f5640228779ffcd41b68d31e8e849e2
+SHA512 (OpenImageIO-3.1.17.0.tar.gz) = e66b4e637ccb734ab20d8024105721bdf5d8612f8e43d181d5d4ef0a944f7c95c9fdb6cdb78dcf10f9d5579e95240f1deca60cea0743e48a28fa2bff79e6aa59
+Size (OpenImageIO-3.1.17.0.tar.gz) = 56133013 bytes
 SHA1 (patch-src_cmake_compiler.cmake) = d261b70e5ff0984b386087be54aff55e2b36c274