CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

www/py-yarl1.25.1

Yet another URL library

Maintainer
amdmi3@FreeBSD.org
Packages
py312-yarl 1.25.1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/aio-libs/yarl
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (48)

Dmitry Marakasov (amdmi3) · 1.25.1
www/py-yarl: update 1.24.5 → 1.25.1
335ba1bf0c
Dmitry Marakasov (amdmi3) · 1.24.5
www/py-yarl: switch testing to pydantic2 as required
0171a8f312
Dmitry Marakasov (amdmi3) · 1.24.5
www/py-yarl: update 1.24.2 → 1.24.5

Also fix failing test handling
4e46618a02
Dmitry Marakasov (amdmi3) · 1.24.2
www/py-yarl: update 1.20.1 → 1.24.2
bc408bdbbd
Po-Chuan Hsieh (sunpoet) · 1.20.1
Mk/Uses/python.mk: Remove USE_PYTHON=cython3{,_run,_test}

- Convert all cython3 occurrence to USE_PYTHON=cython*
- Bump PORTREVISION dependent ports of USE_PYTHON=cython_run for dependency change

PR:		291778
6d475ab2dc
Dmitry Marakasov (amdmi3) · 1.20.1
www/py-yarl: update 1.20.0 → 1.20.1
406a9b67de
Dmitry Marakasov (amdmi3) · 1.20.0
www/py-yarl: update 1.18.3 → 1.20.0
8637259bc8
Po-Chuan Hsieh (sunpoet) · 1.18.3
Mk/Uses/python.mk: Introduce USE_PYTHON=cython3{,_run,_test}

- Update USE_PYTHON=cython{,_run,_test}
- Convert all cython3 occurrence to USE_PYTHON=cython3*
- While I'm here, fix incorrect usage of combining cython3 in BUILD_DEPENDS and USE_PYTHON=cython

It is added to simplify the future transition from Cython 0.29 to 3.

The minimal version is set to 3.0.12 because it is required by devel/py-propcache.
The upper bound of version is set to 3.1 because it is limited by multiple ports.
150c0018fd
Dmitry Marakasov (amdmi3) · 1.18.3
www/py-yarl: update 1.18.0 → 1.18.3
a9195c13d8
Po-Chuan Hsieh (sunpoet) · 1.18.0_1
www/py-yarl: Fix *_DEPENDS

- Add missing BUILD_DEPENDS
- Update version requirement of RUN_DEPENDS
- While I'm here, sort BUILD_DEPENDS and RUN_DEPENDS
- Bump PORTREVISION for dependency change

from pyproject.toml [1]:
[build-system]
requires = [
  # NOTE: The following build dependencies are necessary for initial
  # NOTE: provisioning of the in-tree build backend located under
  # NOTE: `packaging/pep517_backend/`.
  "expandvars",
  "setuptools >= 47",  # Minimum required for `version = attr:`
  "tomli; python_version < '3.11'",
]

from setup.cfg [2]:
install_requires =
  idna >= 2.0
  multidict >= 4.0
  propcache >= 0.2.0

Approved by:	portmgr (blanket)
Reference:	https://github.com/aio-libs/yarl/blob/v1.18.0/pyproject.toml#L1-L9 [1]
		https://github.com/aio-libs/yarl/blob/v1.18.0/setup.cfg#L67-L70 [2]
78d469e241
Dmitry Marakasov (amdmi3) · 1.18.0_1
www/py-yarl: Add missing dependencies

The update to 1.18.0 was not properly tested, missed runtime
dependencies and was broken:

```
% python3 -c 'import yarl'
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/local/lib/python3.11/site-packages/yarl/__init__.py", line 2, in <module>
    from ._url import URL, cache_clear, cache_configure, cache_info
  File "/usr/local/lib/python3.11/site-packages/yarl/_url.py", line 13, in <module>
    from propcache.api import under_cached_property as cached_property
ModuleNotFoundError: No module named 'propcache'
```

Add missing RUN_DEPEND on a recently added py-propcache, and add missing
test dependencies as well.

PR:		282913
Pointyhat to:	bapt
24a5ef4898
Baptiste Daroussin (bapt) · 1.18.0
www/py-yarl: update to 1.18.0

This upgrade is necessary to be done ASAP to fix py-asiohttp which
requires yarl > 1.17.0 since 3.11

Version 1.16.0 introduce a backward incompatibility, I have checked the
various consumers in the ports tree, and they seems not to be affected.

PR:	282913
8f99f061e3
Dmitry Marakasov (amdmi3) · 1.12.0
www/py-yarl: update 1.11.1 → 1.12.0
259d71a5fb
Dmitry Marakasov (amdmi3) · 1.11.1
www/py-yarl: update 1.9.7 → 1.11.1
da883f8103
Dmitry Marakasov (amdmi3) · 1.9.7
www/py-yarl: update 1.9.4 → 1.9.7
e11a35451d
Charlie Li (vishwin) · 1.9.4
www/py-yarl: add ${PY_SETUPTOOLS} to BUILD_DEPENDS

devel/py-wheel is not a PEP-517 build backend; add the real one.
Once the linked PR is committed, this build will fail.

With hat: python
PR: 270510
d3af6c1c0c
Dmitry Marakasov (amdmi3) · 1.9.4
www/py-yarl: update 1.9.2 → 1.9.4
f40c9c16be
Po-Chuan Hsieh (sunpoet) · 1.9.2
www/py-yarl: Remove outdated PYTHON_REL check after lang/python37 removal

Approved by:	portmgr (blanket)
With hat:	python
ee395cb289
Rene Ladan (rene) · 1.9.2
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dmitry Marakasov (amdmi3) · 1.9.2
www/py-yarl: update 1.9.1 → 1.9.2
ed1cd3fc41
Dmitry Marakasov (amdmi3) · 1.9.1
www/py-yarl: update 1.8.2 → 1.9.1
d1282675e2
Dmitry Marakasov (amdmi3) · 1.8.2
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Dmitry Marakasov (amdmi3) · 1.8.2
www/py-yarl: update 1.8.1 → 1.8.2
057353f75f
Dmitry Marakasov (amdmi3) · 1.8.1
*/*: switch my ports from USES=pytest to USE_PYTHON=pytest

Suggested by:	sunpoet
f8e9da8754
Stefan Eßer (se) · 1.8.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.8.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitry Marakasov (amdmi3) · 1.8.1
www/py-yarl: update 1.8.0 → 1.8.1
6643604ed5
Dmitry Marakasov (amdmi3) · 1.8.0
www/py-yarl: update 1.7.2 → 1.8.0
f2b0c1d239
Dmitry Marakasov (amdmi3) · 1.7.2
www/py-yarl: switch to USES=pytest
6d1861e14a
Dmitry Marakasov (amdmi3) · 1.7.2
www/py-yarl: update to 1.7.2
0643e974e8
Dmitry Marakasov (amdmi3) · 1.7.0
www/py-yarl: update to 1.7.0
d2e47a6c5b
Dmitry Marakasov (amdmi3) · 1.6.3
Mk: switch PYTHON_REL to 5 digits to support python 3.10.x

PR:		255013
Differential Revision:	https://reviews.freebsd.org/D29418
Exp-run by:	antoine
Approved by:	wen@, no objection from python@ or portmgr@
0729af4255
Mathieu Arnold (mat) · 1.6.3
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.6.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Kai Knoblich (kai) · 1.6.3
Relax hardcoded paths to fix build with Python 3.8.7

Since r558913 Python 3.8 incorporates BPO-42604 [1] which changed the
shared libs naming scheme.  This means "EXT_SUFFIX" is now derived from
SOABI and yields with Python 3.8 to ".cpython-38.so" instead of ".so".

The affected ports strip the libaries in the "post-install" target via
hardcoded path(s) and the build fails at the end because the new extension
is not expected at this place.

Remedy the issue by adding wildcards to these paths.  This should also
prepare the ports for future Python releases, which will use the new shared
libs naming scheme.

[1] https://bugs.python.org/issue42604

PR:		252057
Reported by:	John Kennedy
Reviewed by:	fluffy, koobs
Approved by:	koobs (python)
9cb5898561
Dmitry Marakasov (amdmi3) · 1.6.3
- Update to 1.6.3 - Force regenerating cython files to avoid compatibility problems with newer python versions
dfbebdfd7c
Dmitry Marakasov (amdmi3) · 1.6.2
- Update to 1.6.2
f1753dcdc7
Dmitry Marakasov (amdmi3) · 1.6.0
- Update to 1.6.0
2f5c18113a
Dmitry Marakasov (amdmi3) · 1.5.1
- Update to 1.5.1
ad27ab5ec8
Dmitry Marakasov (amdmi3) · 1.5.0
- Update to 1.5.0
d68e193177
Dmitry Marakasov (amdmi3) · 1.4.2
- Update to 1.4.2
0dec805d87
Dmitry Marakasov (amdmi3) · 1.4.1
- Update to 1.4.1
1380296552
Dmitry Marakasov (amdmi3) · 1.3.0
- Update to 1.3.0 - Silince stripping - Take maintainership

PR:		238853
Approved by:	wg (maintainer)
19be5268f9
Mathieu Arnold (mat) · 1.1.1
Use PY_FLAVOR for dependencies.

FLAVOR is the current port's flavor, it should not be used outside of
this scope.

Sponsored by:	Absolight
4376dbbb58
William Grzybowski (wg) · 1.1.1
www/py-yarl: update to 1.1.1
82c0e5929d
Mathieu Arnold (mat) · 0.12.0
Convert Python ports to FLAVORS.

Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the
  current python flavor.  It can be used in dependency lines when the
  port itself is not python flavored.  For example, deskutils/calibre.

  By default, all the flavors are generated.  To only generate flavors
  for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
  BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.

  In all the ports with Python dependencies, the *_DEPENDS entries MUST
  end with the flavor so that the framework knows which to build/use.
  This is done by appending '@${PY_FLAVOR}' after the origin (or
  @${FLAVOR} if in a Python module with Python flavors, as the content
  will be the same).  For example:

    RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}

PR:		223071
Reviewed by:	portmgr, python
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D12464
551be3c723
Kubilay Kocak (koobs) · 0.12.0
www/py-yarl: Update to 0.12.0

- Update PORTVERSION/distinfo checksum (0.12.0) [1]
- Set RUN_DEPENDS minimum version to match setup.py:*_requires
- Add TEST_DEPENDS and test target
- Strip shared library

PR:		222524
Submitted by:	philip [1]
Approved by:	wg (maintainer)
86712d73e6
William Grzybowski (wg) · 0.10.3
www/py-yarl: Yet another URL library

WWW: https://github.com/aio-libs/yarl
a7b712c36a