CVS commit: pkgsrc/devel/py-dulwich

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Oct 29 13:21:24 UTC 2026

Modified Files:
        pkgsrc/devel/py-dulwich: Makefile distinfo

Log Message:
py-dulwich: updated to 1.2.20

1.2.20  2026-10-26

* Apply zero-context insertion hunks (as written by ``diff -U0``) after
  the line named in the hunk header rather than before it. Such patches
  inserted their lines one line too early. (Jelmer Vernooij)

* Accept ``max_input_size`` in ``MemoryObjectStore.add_thin_pack``. A push
  to a server backed by a ``MemoryRepo`` failed with a ``TypeError``.
  (Jelmer Vernooij)

* Refuse ref names outside ``refs/`` (such as ``HEAD``) or malformed ones
  in ``receive-pack``, reporting ``funny refname``. Pushing to ``HEAD``
  moved the branch it pointed at while hooks only saw ``HEAD``.
  (Jelmer Vernooij)

* Only pass successfully updated refs to the ``post-receive`` hook in
  ``receive-pack``, and skip the hook when nothing was updated. Refused
  or failed ref updates were reported to it as if they had happened.
  (Jelmer Vernooij)

* Consume the protocol-v2 ``shallow-info`` section a server sends when the
  client is shallow but no depth change was requested. Fetching into a
  shallow clone silently dropped the pack while still updating the remote
  ref, leaving it pointing at missing objects. (Kartik Kenchi)

* Validate object ids in LFS server batch requests. An absolute path or
  ``..`` in the ``oid`` let a client probe for the existence of any file
  readable by the server. Reported by @JMak-Security. (Jelmer Vernooij)

* Add ``PySequoiaSignatureVendor``, which signs and verifies OpenPGP
  signatures with pysequoia using explicitly provided keys rather than
  a GnuPG keyring. (Jelmer Vernooij)

* Pick the same commit and tag headers as git when they are repeated or out
  of place, so a commit with two ``tree`` headers no longer checks out a
  different tree than git does. Commits and tags that git refuses to parse
  are now rejected, and unknown tag headers are preserved. (Jelmer Vernooij)

* Verify commit signatures against the raw commit with its signature headers
  removed, rather than a re-serialization, and read and write SHA-256 commit
  signatures in the ``gpgsig-sha256`` header. (Jelmer Vernooij)

* Refuse to check out ``.gitmodules`` as a symlink. (Kartik Kenchi)

* Report the remote's stderr (e.g. ``Permission denied (publickey).``)
  when an ssh connection closes before the server sends anything, rather
  than a bare hangup error. (Jelmer Vernooij)

* Split a tag's signature from its message at the last signature marker and
  recognise PGP message and X.509 signatures, matching git, so a message that
  quotes a signature no longer confuses signature extraction. (Jelmer Vernooij)

* Speed up indexing of received thin packs in
  ``DiskObjectStore.add_thin_pack``. (Zainab Mehmut)


To generate a diff of this commit:
cvs rdiff -u -r1.91 -r1.92 pkgsrc/devel/py-dulwich/Makefile
cvs rdiff -u -r1.86 -r1.87 pkgsrc/devel/py-dulwich/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-dulwich/Makefile
diff -u pkgsrc/devel/py-dulwich/Makefile:1.91 pkgsrc/devel/py-dulwich/Makefile:1.92
--- pkgsrc/devel/py-dulwich/Makefile:1.91       Sat Oct 24 09:05:56 2026
+++ pkgsrc/devel/py-dulwich/Makefile    Thu Oct 29 13:21:24 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.91 2026/10/24 09:05:56 adam Exp $
+# $NetBSD: Makefile,v 1.92 2026/10/29 13:21:24 adam Exp $
 
-DISTNAME=      dulwich-1.2.19
+DISTNAME=      dulwich-1.2.20
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=d/dulwich/}

Index: pkgsrc/devel/py-dulwich/distinfo
diff -u pkgsrc/devel/py-dulwich/distinfo:1.86 pkgsrc/devel/py-dulwich/distinfo:1.87
--- pkgsrc/devel/py-dulwich/distinfo:1.86       Sat Oct 24 09:05:56 2026
+++ pkgsrc/devel/py-dulwich/distinfo    Thu Oct 29 13:21:24 2026
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.86 2026/10/24 09:05:56 adam Exp $
+$NetBSD: distinfo,v 1.87 2026/10/29 13:21:24 adam Exp $
 
 BLAKE2s (bstr-1.13.1.crate) = 02253df9a122c99c7b4e47518ac6aa9d3a6952dabeab7ddc908a16d8edb6ac2e
 SHA512 (bstr-1.13.1.crate) = 81ef4fbf5a371c47b933d5405cfe23a826683af76607baf4972c1e6a2b23308f73ce4309f2f7eecefd58e1773af0e9c943d7407095724b75f2695cb17d35a653
 Size (bstr-1.13.1.crate) = 356631 bytes
-BLAKE2s (dulwich-1.2.19.tar.gz) = bca7c251aa7698d668d683b555546354b833c19b3de46884ad4a58b3a7fa81ed
-SHA512 (dulwich-1.2.19.tar.gz) = 8724cda2f1fc497a10e9cedc52063f103711d896aba376092bdd635a55d6c5d9ac22ed7b08caf8d5449dbaa06bd3637172d403142504447291e5d4a68520cc7c
-Size (dulwich-1.2.19.tar.gz) = 1435621 bytes
+BLAKE2s (dulwich-1.2.20.tar.gz) = 920dafc7716d79eac4db6b1327056cfb6e84c3decb2fec5556af015be3ec816f
+SHA512 (dulwich-1.2.20.tar.gz) = 9fba324cb0554c11494c15a0277bd778ede21ad321516a8753c1f97d1bc9edabbcbd2138a857973294c634e7d4706ca78c39d0277fd2aeb6aaf2d79a665348f2
+Size (dulwich-1.2.20.tar.gz) = 1443547 bytes
 BLAKE2s (heck-0.5.0.crate) = 0bc71a5746c9d1e7c913d096fb68f1d422464744e18adc592540b291882f5660
 SHA512 (heck-0.5.0.crate) = f044fc9c3d22466629fd8f772ec0555350fd611c0cfadca51d99a3d2f10e155f77c1091916c8a95a6b9b499f366c2e99a5fbf45b010f988bfb9b2501bf9f6a76
 Size (heck-0.5.0.crate) = 11517 bytes