If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
lang/python313: prevent building JIT with newer CPython
While such combos build successfully outside of ports, a circular
build dependency forms when said newer ports also have JIT enabled.
devel/libtextstyle, devel/gettext*: Update to 1.0
devel/gettext-tools: Use external libunistring and libxml2.
lang/python*: Remove dependency on gettext-tools. It isn't used and
it is gettext-tools that depends on python now.
PR: 293963
Exp-run by: antoine
lang/python3{12,13}: limit parallel .pyc compilation to MAKE_JOBS
This option is available since python312[0]. This fixes
python312 and python313 builds with qemu-user-static
emulating riscv64.
[0] https://github.com/python/cpython/commit/9a7e9f9921804f3f90151ca42703e612697dd430
Approved by: vishwin (#python), lwhsu (mentor)
Signed-off-by: Siva Mahadevan <siva@FreeBSD.org>
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54906
lang/python313: fix blake2s_impl regen mismatch
The only difference between "stock" and regenerated blake2s_impl.c
is where a variable is declared in py_blake2s_new_impl(). Patch the
stock file to the regenerated version so the regeneration script
does not get called.
Reported by: fluffy, jan[at]glaubitz[dot]org
PR: 274671
lang/python313: add
What's new: https://docs.python.org/3/whatsnew/3.13.html
Most notably, introduce free-threaded mode. As this mode changes
the ABI, the entire distribution lives in a separate hierarchy, and
thus a new child port (lang/python313t) and FLAVOR (py313t) are
introduced.
Co-authored-by: vishwin
PR: 274671
Differential Revision: https://reviews.freebsd.org/D49680