CVS commit: pkgsrc/security/py-hanko

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Sep  3 10:03:21 UTC 2026

Modified Files:
        pkgsrc/security/py-hanko: Makefile PLIST distinfo

Log Message:
py-hanko: updated to 0.37.0

0.37.0

Breaking changes

requests was relegated to the optional dependency group [requests] due to the change in default fetching backends (see below).
Deprecate fallback to OS trust list through oscrypto.
Remove long-standing deprecated APIs

Signer.sign, Signer.sign_prescribed_attributes, Signer.sign_general_data
validate_cms_signature, validate_detached_cms
PdfSigner.digest_doc_for_signing
open_pkcs11_session(token_label=...)
find_cms_attribute

The HTTPTimeStamper reshuffle (see below) should not be a breaking change for most users, but code that relies on subclassing these objects will likely need some attention.
Dependency changes

aiohttp was moved to the default dependency list. requests was relegated to the optional dependencies (see below). The [async-http] optional dependency group was kept around to avoid breaking 
dependency resolution downstream, but is now empty.
New features and enhancements

Validation

Let FileSystemTLCache accept a str path.

Miscellaneous

Make aiohttp the default backend for fetching validation data and timestamp tokens

HTTPTimeStamper absorbs AIOHttpTimeStamper, which becomes a deprecated
subclass.
Requests-based version renamed to RequestsHTTPTimeStamper.
Make aiohttp resource management more hands-off.

Bugs fixed

Resolve /Parent and mark ancestors when inserting a page.
Specify encoding="utf-8" on all text file reads.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/py-hanko/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/py-hanko/PLIST \
    pkgsrc/security/py-hanko/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-hanko/Makefile
diff -u pkgsrc/security/py-hanko/Makefile:1.3 pkgsrc/security/py-hanko/Makefile:1.4
--- pkgsrc/security/py-hanko/Makefile:1.3       Sun Jun 28 15:41:36 2026
+++ pkgsrc/security/py-hanko/Makefile   Thu Sep  3 10:03:21 2026
@@ -1,6 +1,8 @@
-# $NetBSD: Makefile,v 1.3 2026/06/28 15:41:36 wiz Exp $
+# $NetBSD: Makefile,v 1.4 2026/09/03 10:03:21 adam Exp $
+#
+# Changelog: https://docs.pyhanko.eu/en/latest/changelog.html#pyhanko
 
-DISTNAME=      pyhanko-0.33.0
+DISTNAME=      pyhanko-0.37.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/py//}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pyhanko/}
@@ -11,13 +13,15 @@ COMMENT=    Tools for stamping and signing 
 LICENSE=       mit
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools>=80.8.0:../../devel/py-setuptools
+DEPENDS+=      ${PYPKGPREFIX}-aiohttp>=3.9:../../www/py-aiohttp
 DEPENDS+=      ${PYPKGPREFIX}-asn1crypto>=1.5.1:../../security/py-asn1crypto
-DEPENDS+=      ${PYPKGPREFIX}-tzlocal>=4.3:../../time/py-tzlocal
-DEPENDS+=      ${PYPKGPREFIX}-hanko-certvalidator>=0.29.0:../../security/py-hanko-certvalidator
-DEPENDS+=      ${PYPKGPREFIX}-requests>=2.31.0:../../devel/py-requests
-DEPENDS+=      ${PYPKGPREFIX}-yaml>=6.0:../../textproc/py-yaml
-DEPENDS+=      ${PYPKGPREFIX}-cryptography>=43.0.3:../../security/py-cryptography
+DEPENDS+=      ${PYPKGPREFIX}-cryptography>=48.0.0:../../security/py-cryptography
+DEPENDS+=      ${PYPKGPREFIX}-hanko-certvalidator>=0.32.0:../../security/py-hanko-certvalidator
 DEPENDS+=      ${PYPKGPREFIX}-lxml>=5.4.0:../../textproc/py-lxml
+DEPENDS+=      ${PYPKGPREFIX}-tzlocal>=4.3:../../time/py-tzlocal
+TEST_DEPENDS+= ${PYPKGPREFIX}-freezegun>=1.1.0:../../devel/py-freezegun
+TEST_DEPENDS+= ${PYPKGPREFIX}-test-aiohttp>=1.1.0:../../www/py-test-aiohttp
+TEST_DEPENDS+= ${PYPKGPREFIX}-test-cov>=4.0:../../devel/py-test-cov
 
 USE_LANGUAGES= # none
 

Index: pkgsrc/security/py-hanko/PLIST
diff -u pkgsrc/security/py-hanko/PLIST:1.2 pkgsrc/security/py-hanko/PLIST:1.3
--- pkgsrc/security/py-hanko/PLIST:1.2  Tue Feb 17 09:30:09 2026
+++ pkgsrc/security/py-hanko/PLIST      Thu Sep  3 10:03:21 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2026/02/17 09:30:09 adam Exp $
+@comment $NetBSD: PLIST,v 1.3 2026/09/03 10:03:21 adam Exp $
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
 ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
@@ -186,6 +186,9 @@ ${PYSITELIB}/pyhanko/pdf_utils/xref.pyo
 ${PYSITELIB}/pyhanko/sign/__init__.py
 ${PYSITELIB}/pyhanko/sign/__init__.pyc
 ${PYSITELIB}/pyhanko/sign/__init__.pyo
+${PYSITELIB}/pyhanko/sign/_session_scope.py
+${PYSITELIB}/pyhanko/sign/_session_scope.pyc
+${PYSITELIB}/pyhanko/sign/_session_scope.pyo
 ${PYSITELIB}/pyhanko/sign/ades/__init__.py
 ${PYSITELIB}/pyhanko/sign/ades/__init__.pyc
 ${PYSITELIB}/pyhanko/sign/ades/__init__.pyo
@@ -307,9 +310,6 @@ ${PYSITELIB}/pyhanko/sign/validation/err
 ${PYSITELIB}/pyhanko/sign/validation/generic_cms.py
 ${PYSITELIB}/pyhanko/sign/validation/generic_cms.pyc
 ${PYSITELIB}/pyhanko/sign/validation/generic_cms.pyo
-${PYSITELIB}/pyhanko/sign/validation/ltv.py
-${PYSITELIB}/pyhanko/sign/validation/ltv.pyc
-${PYSITELIB}/pyhanko/sign/validation/ltv.pyo
 ${PYSITELIB}/pyhanko/sign/validation/pdf_embedded.py
 ${PYSITELIB}/pyhanko/sign/validation/pdf_embedded.pyc
 ${PYSITELIB}/pyhanko/sign/validation/pdf_embedded.pyo
@@ -328,7 +328,8 @@ ${PYSITELIB}/pyhanko/sign/validation/qua
 ${PYSITELIB}/pyhanko/sign/validation/qualified/eutl_parse.py
 ${PYSITELIB}/pyhanko/sign/validation/qualified/eutl_parse.pyc
 ${PYSITELIB}/pyhanko/sign/validation/qualified/eutl_parse.pyo
-${PYSITELIB}/pyhanko/sign/validation/qualified/lotl-certs/bootstrap.cert.pem
+${PYSITELIB}/pyhanko/sign/validation/qualified/lotl-certs/bootstrap-0.cert.pem
+${PYSITELIB}/pyhanko/sign/validation/qualified/lotl-certs/bootstrap-1.cert.pem
 ${PYSITELIB}/pyhanko/sign/validation/qualified/lotl-certs/latest.cert.pem
 ${PYSITELIB}/pyhanko/sign/validation/qualified/q_status.py
 ${PYSITELIB}/pyhanko/sign/validation/qualified/q_status.pyc
Index: pkgsrc/security/py-hanko/distinfo
diff -u pkgsrc/security/py-hanko/distinfo:1.2 pkgsrc/security/py-hanko/distinfo:1.3
--- pkgsrc/security/py-hanko/distinfo:1.2       Tue Feb 17 09:30:09 2026
+++ pkgsrc/security/py-hanko/distinfo   Thu Sep  3 10:03:21 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.2 2026/02/17 09:30:09 adam Exp $
+$NetBSD: distinfo,v 1.3 2026/09/03 10:03:21 adam Exp $
 
-BLAKE2s (pyhanko-0.33.0.tar.gz) = 88305adcd79eb8863912e19a4b4708ec1a9a4eb25d70c25643a8eb8f072d1e43
-SHA512 (pyhanko-0.33.0.tar.gz) = a696db504e52536a8ddf1a30e8ec90f48d2feb5cdb2cf386e871067e5c1fcf4e3243b11cbeb5f5c5e45fec10f6575abc12049aaed2dd5c6e5001c37129556d8f
-Size (pyhanko-0.33.0.tar.gz) = 412604 bytes
+BLAKE2s (pyhanko-0.37.0.tar.gz) = c02180bcf12137f3e5a1d2870fce6aa83a469c2340acb59913543cb60f8e8bb8
+SHA512 (pyhanko-0.37.0.tar.gz) = eb200e6a6dab4329553000dabb9e8481f9add97ffedc40061a2062055259912aeaa704221846c3529c702f86e849957b37135ddc030aa517857b03615b7d436c
+Size (pyhanko-0.37.0.tar.gz) = 7988521 bytes