CVS commit: pkgsrc/security/py-nvdlib

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Oct 26 05:54:18 UTC 2026

Modified Files:
        pkgsrc/security/py-nvdlib: Makefile PLIST distinfo
Removed Files:
        pkgsrc/security/py-nvdlib/patches: patch-setup.py

Log Message:
py-nvdlib: updated to 0.9.0

0.9.0 (2026-09-27)

**Breaking**
- Removed the `verbose` parameter from `searchCVE` and `searchCVE_V2`. It has done nothing since 0.7.8. Use the Python logging module instead, see 
https://nvdlib.com/en/latest/v2/startedv2.html#logging

**Bugfixes**
- Capped the `searchCPEmatch` limit at 500, the Match Criteria API maximum.
- Fixed CPE match generator requests being sent to the CPE URL.
- Stopped requesting an extra empty page when the total results are an exact multiple of the page size.
- Fixed the `pubStartDate` error message showing `pubEndDate`.
- Corrected CVE, CPE, and match string docstrings to match the live API field names, such as `cisaExploitAdd` and `lastModified`.

**Enhancements**
- Added `asDict` to every search function to return the plain dictionaries from the NVD API instead of objects.
- Added `searchCVEHistory` and `searchCVEHistory_V2` for the CVE Change History API.
- Added `searchSource` and `searchSource_V2` for the Source API.
- Added `cveIds`, `cveTag`, `kevStartDate`, and `kevEndDate` to `searchCVE` and `searchCVE_V2`.
- Added `searchCPEmatch_V2` and the `proxies` parameter to `searchCPEmatch`.
- CVSS 3.1, 3.0, and 2.0 scores now use the Primary metric when one is present, the same as CVSS 4.0.
- `cpe` now includes the CPE matches from every configuration node, not just the first.
- Added `ssvc` to CVE objects when the CVE includes SSVC data.
- HTTP errors now include the reason NVD returns in the `message` header.


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/py-nvdlib/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/py-nvdlib/PLIST
cvs rdiff -u -r1.5 -r1.6 pkgsrc/security/py-nvdlib/distinfo
cvs rdiff -u -r1.1 -r0 pkgsrc/security/py-nvdlib/patches/patch-setup.py

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-nvdlib/Makefile
diff -u pkgsrc/security/py-nvdlib/Makefile:1.7 pkgsrc/security/py-nvdlib/Makefile:1.8
--- pkgsrc/security/py-nvdlib/Makefile:1.7      Thu Oct  9 07:57:56 2025
+++ pkgsrc/security/py-nvdlib/Makefile  Mon Oct 26 05:54:18 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.7 2025/10/09 07:57:56 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2026/10/26 05:54:18 adam Exp $
 
-DISTNAME=      nvdlib-0.8.3
+DISTNAME=      nvdlib-0.9.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=vehemont/}
@@ -14,11 +14,9 @@ LICENSE=     mit
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools>=78:../../devel/py-setuptools
 DEPENDS+=      ${PYPKGPREFIX}-requests>=2.24.0:../../devel/py-requests
-TEST_DEPENDS+= ${PYPKGPREFIX}-responses>=0.18:../../net/py-responses
+TEST_DEPENDS+= ${PYPKGPREFIX}-responses>=0.25:../../net/py-responses
 
 USE_LANGUAGES= # none
 
-PYTHON_VERSIONS_INCOMPATIBLE=  310
-
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/py-nvdlib/PLIST
diff -u pkgsrc/security/py-nvdlib/PLIST:1.2 pkgsrc/security/py-nvdlib/PLIST:1.3
--- pkgsrc/security/py-nvdlib/PLIST:1.2 Mon Apr 14 05:09:33 2025
+++ pkgsrc/security/py-nvdlib/PLIST     Mon Oct 26 05:54:18 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2025/04/14 05:09:33 adam Exp $
+@comment $NetBSD: PLIST,v 1.3 2026/10/26 05:54:18 adam Exp $
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
 ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
@@ -19,3 +19,9 @@ ${PYSITELIB}/nvdlib/cve.pyo
 ${PYSITELIB}/nvdlib/get.py
 ${PYSITELIB}/nvdlib/get.pyc
 ${PYSITELIB}/nvdlib/get.pyo
+${PYSITELIB}/nvdlib/history.py
+${PYSITELIB}/nvdlib/history.pyc
+${PYSITELIB}/nvdlib/history.pyo
+${PYSITELIB}/nvdlib/source.py
+${PYSITELIB}/nvdlib/source.pyc
+${PYSITELIB}/nvdlib/source.pyo

Index: pkgsrc/security/py-nvdlib/distinfo
diff -u pkgsrc/security/py-nvdlib/distinfo:1.5 pkgsrc/security/py-nvdlib/distinfo:1.6
--- pkgsrc/security/py-nvdlib/distinfo:1.5      Tue Sep  2 07:29:46 2025
+++ pkgsrc/security/py-nvdlib/distinfo  Mon Oct 26 05:54:18 2026
@@ -1,6 +1,5 @@
-$NetBSD: distinfo,v 1.5 2025/09/02 07:29:46 adam Exp $
+$NetBSD: distinfo,v 1.6 2026/10/26 05:54:18 adam Exp $
 
-BLAKE2s (nvdlib-0.8.3.tar.gz) = bcde30c6c6da48cafb1b36fcdbb313f628426936febf6ac731093ea5812f428e
-SHA512 (nvdlib-0.8.3.tar.gz) = c07f1a7aa0b415f0c8a909a5e1dff4e9a5efcc807800c35289aa6ca9fdfb96bfb8b4beae8c3a8a9d71f5f6fddaf68ea7a4aa42140224be020079a25563857e11
-Size (nvdlib-0.8.3.tar.gz) = 548525 bytes
-SHA1 (patch-setup.py) = fbf3594ae1e3afd17afa7213e1bec2c40b14dae5
+BLAKE2s (nvdlib-0.9.0.tar.gz) = a7b028630c8726116033d428a4af749dd481d92f8df04f8dd2d630c68b18e84b
+SHA512 (nvdlib-0.9.0.tar.gz) = 4501e06709510298a2c0bbfbb8670a26747a8452fe5853556523a6803c1d629d8d435611dfea06310db07a17a9f0f52f6c94d16bcf278a77dbda9519c6a96840
+Size (nvdlib-0.9.0.tar.gz) = 556971 bytes