CVS commit: pkgsrc/misc/py-copier

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep  9 10:50:43 UTC 2026

Modified Files:
        pkgsrc/misc/py-copier: Makefile distinfo

Log Message:
py-copier: updated to 9.18.2

9.18.2 (2026-09-07)

Fix

- allow overwriting destination symlinks when `preserve_symlinks: false`
- **cache**: resolve submodules from the current checkout's .gitmodules

Security

- prevent trust bypass via ambiguous URL characters

    To prevent URL confusion attacks, trusted prefix matching is now restricted to
    repository URL paths containing only [RFC 3986 §2.3] "unreserved" characters
    (letters, digits, `-`, `.`, `_`, `~`) and `/`. URL paths containing other
    characters now require an exact, verbatim match.


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/misc/py-copier/Makefile
cvs rdiff -u -r1.1 -r1.2 pkgsrc/misc/py-copier/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/misc/py-copier/Makefile
diff -u pkgsrc/misc/py-copier/Makefile:1.2 pkgsrc/misc/py-copier/Makefile:1.3
--- pkgsrc/misc/py-copier/Makefile:1.2  Sat Sep  5 05:11:26 2026
+++ pkgsrc/misc/py-copier/Makefile      Wed Sep  9 10:50:43 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2026/09/05 05:11:26 adam Exp $
+# $NetBSD: Makefile,v 1.3 2026/09/09 10:50:43 adam Exp $
 
-DISTNAME=      copier-9.18.1
+DISTNAME=      copier-9.18.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    misc python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/copier/}

Index: pkgsrc/misc/py-copier/distinfo
diff -u pkgsrc/misc/py-copier/distinfo:1.1 pkgsrc/misc/py-copier/distinfo:1.2
--- pkgsrc/misc/py-copier/distinfo:1.1  Thu Sep  3 05:13:15 2026
+++ pkgsrc/misc/py-copier/distinfo      Wed Sep  9 10:50:43 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.1 2026/09/03 05:13:15 adam Exp $
+$NetBSD: distinfo,v 1.2 2026/09/09 10:50:43 adam Exp $
 
-BLAKE2s (copier-9.18.1.tar.gz) = f3c3dd4b5e49f3f2942881dff67427b95c57bb3db2fe989ec5c7d7adf8dce395
-SHA512 (copier-9.18.1.tar.gz) = df4117bfb1c457342d68a56f38f6f9b6b0540ad138edf138e25cd8b5cea06b67279a50afc0894cf78a52d0def2e10fecefb7af4dfb35ee3af8bdf2d6db6b0503
-Size (copier-9.18.1.tar.gz) = 666917 bytes
+BLAKE2s (copier-9.18.2.tar.gz) = 143fbb1648160380eaf79d7be5117cada5dcf9dda0a52648570554585cb4180e
+SHA512 (copier-9.18.2.tar.gz) = f7b639452da562e7d00eec9172b3876dd4abeef16d0e62798bdd4845c567da66ec5da10d9072e547551197e6f780da7bcd69c575a95e80be95e15e80268ff44e
+Size (copier-9.18.2.tar.gz) = 669824 bytes