CVS commit: pkgsrc/devel/py-setuptools

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/devel/py-setuptools
From: "Thomas Klausner" <wiz%netbsd.org@localhost>
Date: Sun, 25 Oct 2026 13:38:46 +0000

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Oct 25 13:38:46 UTC 2026

Modified Files:
        pkgsrc/devel/py-setuptools: Makefile PLIST distinfo

Log Message:
py-setuptools: update to 84.2.1.

v84.2.1
=======

Bugfixes
--------

- Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
- Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when
  ``Extension.py_limited_api`` is enabled. These builds now use their
  version-specific extension suffix instead of using the unsupported ``.abi3t``
  suffix. (#5363)

Improved Documentation
----------------------

- Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0
=======

Features
--------

- Added support for building abi3t extensions and abi3.abi3t wheels on Python
  3.15 and newer. See :pep:`803` and the `Python 3.15 "What's New" entry
  <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>`_
  for more details. (#5193)
- Updated vendored packaging version to 26.3, which adds support for the
  ``abi3t`` tag from :pep:`803`. (#5361)

Bugfixes
--------

- Use target sysconfig data for stable-ABI extension filenames. (#5351)

v84.1.0
=======

Features
--------

- ``setuptools.archive_util`` now raises the new ``UnsafeMember`` exception when
  an archive member would be extracted outside of the extraction directory,
  where previously such a member was silently skipped. Aborting makes a
  malicious or malformed archive visible to the caller instead of yielding a
  quietly incomplete extraction, and matches the behavior of the standard
  library's ``tarfile`` extraction filters.

Bugfixes
--------

- ``Wheel.install_as_egg`` no longer creates namespace package directories
  outside of the destination egg directory. Entries in a wheel's
  ``namespace_packages.txt`` were split on ``.`` and passed straight to
  ``os.path.join``, so an entry that was absolute, drive-qualified, or UNC
  discarded the destination and placed an ``__init__.py`` at a path chosen by
  the wheel. Namespace entries are now validated as dotted module names on
  every platform -- see GHSA-xmj3-9gf7-h52w.

  This code path is reached only by the deprecated ``setup_requires``
  mechanism when ``setup()`` is invoked outside a PEP 517 frontend; the
  setuptools build backend never reaches it.
- ``setuptools.archive_util`` no longer extracts archive members outside of the
  requested extraction directory. Both the tar and zip formats specify ``/`` as
  the only path separator, but the guard against ``..`` components split member
  names on ``/`` alone, so a name such as ``..\escaped.txt`` was treated as a
  single component and then resolved as a traversal by the filesystem on
  Windows. Member names containing a backslash, a drive letter, or a UNC prefix
  are now rejected on every platform, as are members whose resolved destination
  falls outside the extraction directory -- see GHSA-grgh-hr87-3jpw.


To generate a diff of this commit:
cvs rdiff -u -r1.278 -r1.279 pkgsrc/devel/py-setuptools/Makefile
cvs rdiff -u -r1.109 -r1.110 pkgsrc/devel/py-setuptools/PLIST
cvs rdiff -u -r1.252 -r1.253 pkgsrc/devel/py-setuptools/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-setuptools/Makefile
diff -u pkgsrc/devel/py-setuptools/Makefile:1.278 pkgsrc/devel/py-setuptools/Makefile:1.279
--- pkgsrc/devel/py-setuptools/Makefile:1.278   Sun Aug  9 17:06:21 2026
+++ pkgsrc/devel/py-setuptools/Makefile Sun Oct 25 13:38:46 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.278 2026/08/09 17:06:21 wiz Exp $
+# $NetBSD: Makefile,v 1.279 2026/10/25 13:38:46 wiz Exp $
 
-DISTNAME=      setuptools-84.0.0
+DISTNAME=      setuptools-84.2.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=s/setuptools/}
@@ -37,6 +37,8 @@ TEST_ENV+=    PYTHONPATH=${WRKSRC}
 
 # as of 84.0.0 (make sure previous version is not installed by test dependency)
 # 1006 passed, 31 skipped, 13 xfailed, 3 xpassed
+# as of 84.2.1
+# 294 failed, 890 passed, 33 skipped, 13 xfailed, 2 xpassed, 3 errors
 .if make(test)
 ALLOW_NETWORK_ACCESS=  yes
 .endif

Index: pkgsrc/devel/py-setuptools/PLIST
diff -u pkgsrc/devel/py-setuptools/PLIST:1.109 pkgsrc/devel/py-setuptools/PLIST:1.110
--- pkgsrc/devel/py-setuptools/PLIST:1.109      Sun Aug  9 17:06:21 2026
+++ pkgsrc/devel/py-setuptools/PLIST    Sun Oct 25 13:38:46 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.109 2026/08/09 17:06:21 wiz Exp $
+@comment $NetBSD: PLIST,v 1.110 2026/10/25 13:38:46 wiz Exp $
 ${PYSITELIB}/_distutils_hack/__init__.py
 ${PYSITELIB}/_distutils_hack/__init__.pyc
 ${PYSITELIB}/_distutils_hack/__init__.pyo
@@ -408,14 +408,14 @@ ${PYSITELIB}/setuptools/_vendor/more_ite
 ${PYSITELIB}/setuptools/_vendor/more_itertools/recipes.pyc
 ${PYSITELIB}/setuptools/_vendor/more_itertools/recipes.pyi
 ${PYSITELIB}/setuptools/_vendor/more_itertools/recipes.pyo
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/INSTALLER
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/METADATA
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/RECORD
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/REQUESTED
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/WHEEL
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/licenses/LICENSE
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/licenses/LICENSE.APACHE
-${PYSITELIB}/setuptools/_vendor/packaging-26.0.dist-info/licenses/LICENSE.BSD
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/INSTALLER
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/METADATA
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/RECORD
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/REQUESTED
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/WHEEL
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/licenses/LICENSE
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/licenses/LICENSE.APACHE
+${PYSITELIB}/setuptools/_vendor/packaging-26.3.dist-info/licenses/LICENSE.BSD
 ${PYSITELIB}/setuptools/_vendor/packaging/__init__.py
 ${PYSITELIB}/setuptools/_vendor/packaging/__init__.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/__init__.pyo
@@ -431,12 +431,24 @@ ${PYSITELIB}/setuptools/_vendor/packagin
 ${PYSITELIB}/setuptools/_vendor/packaging/_parser.py
 ${PYSITELIB}/setuptools/_vendor/packaging/_parser.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/_parser.pyo
+${PYSITELIB}/setuptools/_vendor/packaging/_ranges.py
+${PYSITELIB}/setuptools/_vendor/packaging/_ranges.pyc
+${PYSITELIB}/setuptools/_vendor/packaging/_ranges.pyo
 ${PYSITELIB}/setuptools/_vendor/packaging/_structures.py
 ${PYSITELIB}/setuptools/_vendor/packaging/_structures.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/_structures.pyo
 ${PYSITELIB}/setuptools/_vendor/packaging/_tokenizer.py
 ${PYSITELIB}/setuptools/_vendor/packaging/_tokenizer.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/_tokenizer.pyo
+${PYSITELIB}/setuptools/_vendor/packaging/dependency_groups.py
+${PYSITELIB}/setuptools/_vendor/packaging/dependency_groups.pyc
+${PYSITELIB}/setuptools/_vendor/packaging/dependency_groups.pyo
+${PYSITELIB}/setuptools/_vendor/packaging/direct_url.py
+${PYSITELIB}/setuptools/_vendor/packaging/direct_url.pyc
+${PYSITELIB}/setuptools/_vendor/packaging/direct_url.pyo
+${PYSITELIB}/setuptools/_vendor/packaging/errors.py
+${PYSITELIB}/setuptools/_vendor/packaging/errors.pyc
+${PYSITELIB}/setuptools/_vendor/packaging/errors.pyo
 ${PYSITELIB}/setuptools/_vendor/packaging/licenses/__init__.py
 ${PYSITELIB}/setuptools/_vendor/packaging/licenses/__init__.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/licenses/__init__.pyo
@@ -453,6 +465,9 @@ ${PYSITELIB}/setuptools/_vendor/packagin
 ${PYSITELIB}/setuptools/_vendor/packaging/pylock.py
 ${PYSITELIB}/setuptools/_vendor/packaging/pylock.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/pylock.pyo
+${PYSITELIB}/setuptools/_vendor/packaging/ranges.py
+${PYSITELIB}/setuptools/_vendor/packaging/ranges.pyc
+${PYSITELIB}/setuptools/_vendor/packaging/ranges.pyo
 ${PYSITELIB}/setuptools/_vendor/packaging/requirements.py
 ${PYSITELIB}/setuptools/_vendor/packaging/requirements.pyc
 ${PYSITELIB}/setuptools/_vendor/packaging/requirements.pyo

Index: pkgsrc/devel/py-setuptools/distinfo
diff -u pkgsrc/devel/py-setuptools/distinfo:1.252 pkgsrc/devel/py-setuptools/distinfo:1.253
--- pkgsrc/devel/py-setuptools/distinfo:1.252   Sun Aug  9 17:06:21 2026
+++ pkgsrc/devel/py-setuptools/distinfo Sun Oct 25 13:38:46 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.252 2026/08/09 17:06:21 wiz Exp $
+$NetBSD: distinfo,v 1.253 2026/10/25 13:38:46 wiz Exp $
 
-BLAKE2s (setuptools-84.0.0.tar.gz) = acc17cd8da40f98a1178f672acd98b4f1ad4d0d2062db777db64884216a31063
-SHA512 (setuptools-84.0.0.tar.gz) = 67721834362dd88c256cbd523413dbdcb99ca871bcc873ffa29c7667687973e1d5e15b0ea8ef4529711418b14d3d660771846877543001d4ab0fe8b4585ac9ad
-Size (setuptools-84.0.0.tar.gz) = 1168449 bytes
+BLAKE2s (setuptools-84.2.1.tar.gz) = fd2e8abfbcf679060685c6b2fd4c25ed0b067bce99a39bd7d68f61ef61c4d25e
+SHA512 (setuptools-84.2.1.tar.gz) = 9e4c9a9ec45c69abe6f8953b6c6490eb1ffe2aea9a666beab45bdd7d5e2acbb2dbfddf6d7797c01c3e5a47b10bee519c029587fb45000ebb5c5b72468498ef0b
+Size (setuptools-84.2.1.tar.gz) = 1230289 bytes

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index