[pkgsrc/trunk]: pkgsrc/textproc/py-lxml py-lxml: updated to 4.7.1

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/26fbe22c7a40
branches:  trunk
changeset: 771300:26fbe22c7a40
user:      adam <adam%pkgsrc.org@localhost>
date:      Thu Dec 16 20:17:10 2021 +0000

description:
py-lxml: updated to 4.7.1

4.7.1 (2021-12-13)

Features added

Chunked Unicode string parsing via parser.feed() now encodes the input data to the native UTF-8 encoding directly, instead of going through Py_UNICODE / wchar_t encoding first, which previously 
required duplicate recoding in most cases.

Bugs fixed

The standard namespace prefixes were mishandled during "C14N2" serialisation on Python 3. See https://mail.python.org/archives/list/lxml%python.org@localhost/thread/6ZFBHFOVHOS5GFDOAMPCT6HM5HZPWQ4Q/
lxml.objectify previously accepted non-XML numbers with underscores (like "1_000") as integers or float values in Python 3.6 and later. It now adheres to the number format of the XML spec again.
Static wheels of lxml now contain the header files of zlib and libiconv (in addition to the already provided headers of libxml2/libxslt/libexslt).

Other changes

Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).

4.7.0 (2021-12-13)

Release retracted due to missing files in lxml/includes/.

4.6.5 (2021-12-12)

Bugs fixed

A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script content through SVG images (CVE-2021-43818).
A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script content through CSS imports and other crafted constructs (CVE-2021-43818).

diffstat:

 textproc/py-lxml/Makefile |  9 ++++-----
 textproc/py-lxml/distinfo |  8 ++++----
 2 files changed, 8 insertions(+), 9 deletions(-)

diffs (40 lines):

diff -r c540b15a9d3e -r 26fbe22c7a40 textproc/py-lxml/Makefile
--- a/textproc/py-lxml/Makefile Thu Dec 16 20:08:52 2021 +0000
+++ b/textproc/py-lxml/Makefile Thu Dec 16 20:17:10 2021 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.77 2021/12/08 16:06:46 adam Exp $
+# $NetBSD: Makefile,v 1.78 2021/12/16 20:17:10 adam Exp $
 
-DISTNAME=      lxml-4.6.4
+DISTNAME=      lxml-4.7.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=   1
 CATEGORIES=    textproc python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=l/lxml/}
 
@@ -18,9 +17,9 @@
 
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../lang/python/egg.mk"
-BUILDLINK_API_DEPENDS.libxml2+=        libxml2>=2.9.2
+BUILDLINK_API_DEPENDS.libxml2+=        libxml2>=2.9.12
 .include "../../textproc/libxml2/buildlink3.mk"
-BUILDLINK_API_DEPENDS.libxslt+=        libxslt>=1.1.27
+BUILDLINK_API_DEPENDS.libxslt+=        libxslt>=1.1.34
 .include "../../textproc/libxslt/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
 # fix for UnicodeEncodeError: 'ascii' codec can't encode characters
diff -r c540b15a9d3e -r 26fbe22c7a40 textproc/py-lxml/distinfo
--- a/textproc/py-lxml/distinfo Thu Dec 16 20:08:52 2021 +0000
+++ b/textproc/py-lxml/distinfo Thu Dec 16 20:17:10 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.61 2021/11/03 09:38:40 adam Exp $
+$NetBSD: distinfo,v 1.62 2021/12/16 20:17:10 adam Exp $
 
-BLAKE2s (lxml-4.6.4.tar.gz) = b367dee2bbfd4f61f048696ab916d865247408bb50a2dfc4dbf4feb3e8ef2682
-SHA512 (lxml-4.6.4.tar.gz) = 5398bd70f1be5ea84365643856ca2b293c466c0e128f54eefe4a19a779a507f0e3e83575c4850d6a735ce75d56a619b59673913ef5b0ce6cb183a19b5bcf32fe
-Size (lxml-4.6.4.tar.gz) = 3177833 bytes
+BLAKE2s (lxml-4.7.1.tar.gz) = 0944164c534767fc9a0ceac389b8de1e522b4bba16d2248d3a2f7614b5c6b728
+SHA512 (lxml-4.7.1.tar.gz) = dd0d421e10db6c9084cf5b2c04a4fc54d74bd62b4dfa83efcf92dd46cd1c5f043c47613521b2de04c450b83eb1161d197b017c53e615e5785e97e7afe106b6cf
+Size (lxml-4.7.1.tar.gz) = 3204203 bytes
 SHA1 (patch-setupinfo.py) = 264e934a4e5c095b0a65769798bf94db394d03e1