CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

misc/py-spdx-tools0.8.5_1

Parses, validates and creates SPDX documents

Maintainer
kde@FreeBSD.org
Packages
py312-spdx-tools 0.8.5_1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/spdx/tools-python
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (19)

Tijl Coosemans (tijl) · 0.8.5_1
*/*: Use C.UTF-8 locale

Ports 02f27a83b44d fixed the ports tree to the C locale so it would work
correctly in environments where users use a locale that isn't compatible
with the C locale, e.g. xx_YY.UTF-8 where [A-Z] includes more than just
upper case letters.  USE_LOCALE was introduced to let ports use another
locale if they needed it.  The C.UTF-8 locale was created later on to be
mostly compatible with the C locale.

Switch the ports tree locale to C.UTF-8 and remove USE_LOCALE.  The
world has moved to Unicode so all ports either require it or know how to
build correctly in a Unicode environment.

PR:		295945
Exp-run by:	antoine
b6ec06f079
Jason E. Hale (jhale) · 0.8.5_1
misc/py-spdx-tools: Fix fs-violations for consumers

When run as root by a consumer port, spdx_tools writes several files to
$PYTHON_SITELIB}/spdx_tools/spdx/parser/ that must be pregenerated to
avoid fs-violations in poudriere.

Pass maintainership to kde@ since the main consumers of this will be the
Qt6 ports starting with Qt 6.11.0.

PR:		294345
Approved by:	kai
MFH:		2026Q2
e1190193af
Kai Knoblich (kai) · 0.8.5
misc/py-spdx-tools: Update to 0.8.5

* Remove no longer needed workaround, which was required to resolve
  fs-violations in the staging phase.

Changelog since 0.8.3:

https://github.com/spdx/tools-python/blob/v0.8.5/CHANGELOG.md
3f8e2858c5
Kai Knoblich (kai) · 0.8.3
misc/py-spdx-tools: Update to 0.8.3

* Add a workaround by pre-generating some files to avoid fs-violations
  in poudriere.

* Remove CONFLICTS_INSTALL as the installed package of this port
  no longer conflicts with misc/py-spdx.

Changelog since 0.7.1:

https://github.com/spdx/tools-python/blob/v0.8.3/CHANGELOG.md

PR:		284464
Reported by:	jhale
20b4df7d51
Po-Chuan Hsieh (sunpoet) · 0.7.1_1
devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml

- Bump PORTREVISION of dependent ports for dependency change
1a80ec7c22
Charlie Li (vishwin) · 0.7.1
devel/py-setuptools-scm: update to 8.0.4

Directory and PORTNAME changed to match normalised name in release
tarball; consumers updated to match.

Although setuptools itself is specified as a run dependency in the
Python package metadata, it is currently left out here to prevent
environment pollution until at least PR 270510 is committed.
Additionally, this version of setuptools-scm requires setuptools>=61,
which means this version is only meant for USE_PYTHON=pep517 ports
as all USE_PYTHON=distutils ports will switch to devel/py-setuptools58
also after PR 270510. science/py-emmet-core is switched to
devel/py-setuptools_scm7 accordingly, as it specifies setuptools-scm<8.
devel/py-{flit-scm,hatch-vcs} have ${PY_SETUPTOOLS} added to
RUN_DEPENDS to compensate.

Further details: https://wiki.freebsd.org/Python/setuptools

Reported by: yuri
Co-authored by: matthew
Exp-run by: antoine (earlier iteration)
Approved by: yuri (science/py-emmet-core, previous iteration)
PR: 272134
Differential Revision: https://reviews.freebsd.org/D39288
5d4139f8bd
Charlie Li (vishwin) · 0.7.1
devel/py-setuptools: convert individual consumers to ${PY_SETUPTOOLS}

Currently a no-op, but in the future outputs the correct setuptools
port depending on whether USES_PYTHON=distutils is specified.

With hat: python
PR: 270510, 270358
9a80a6ee5e
Rene Ladan (rene) · 0.7.1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Kai Knoblich (kai) · 0.7.1
misc/py-spdx-tools: update to 0.7.1

Switch to USE_PYTHON=pep517, pytest

Changes:	https://github.com/spdx/tools-python/blob/v0.7.1/CHANGELOG.md

PR:		271343
8cf61e8694
Dmitry Marakasov (amdmi3) · 0.6.1
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Stefan Eßer (se) · 0.6.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.6.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 0.6.1
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
04b9da4140
Mathieu Arnold (mat) · 0.6.1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.6.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Antoine Brodin (antoine) · 0.6.1
Drop python 2.7 support from a few ports

With hat:	portmgr
aa7a6c429e
Kai Knoblich (kai) · 0.6.1
misc/py-spdx-tools: Update to 0.6.1

* Enable build for all Python versions because Python 3 is supported since
  the 0.5.x release.  This became more evident via tests by using pytest.

* Make the port concurrent safe as it installs a script and some (optional)
  example files.

* Also refine the "do-test" target by using devel/py-pytest which gives a
  better overview of the test results.

Changelog since 0.5.4:

https://github.com/spdx/tools-python/compare/v0.5.4...eac4e90
5b003102de
Kai Knoblich (kai) · 0.5.4
Change my maintainer email address to my new one at the FreeBSD project.

Reviewed by:	miwi (mentor)
Approved by:	miwi (mentor)
Differential Revision: https://reviews.freebsd.org/D19050
6a4a5116bf
Martin Wilke (miwi) · 0.5.4
Implements an SPDX tag/value and RDF parser, validator and handler in Python.

Features:

- API to create and manipulate SPDX documents.
- Parse and create Tag/Value format SPDX files
- Parse and create RDF format SPDX files

WWW: https://github.com/spdx/tools-python

PR:		229438
Submitted by:	freebsd_ports@k-worx.org
Sponsored by:	iXsystems Inc.
ad19abcbf4