CVS commit: pkgsrc/textproc/py-black

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Mar 16 17:46:08 UTC 2024

Modified Files:
        pkgsrc/textproc/py-black: Makefile distinfo

Log Message:
py-black: updated to 24.3.0

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you
run Black on untrusted input, or if you habitually put thousands of leading tab
characters in your docstrings, you are strongly encouraged to upgrade immediately to fix
[CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).

This release also fixes a bug in Black's AST safety check that allowed Black to make
incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

- Don't move comments along with delimiters, which could cause crashes
- Strengthen AST safety check to catch more unsafe changes to strings. Previous versions
 of Black would incorrectly format the contents of certain unusual f-strings containing
 nested strings with the same quote type. Now, Black will crash on such strings until
 support for the new f-string syntax is implemented.
- Fix a bug where line-ranges exceeding the last code line would not work as expected

Performance

- Fix catastrophic performance on docstrings that contain large numbers of leading tab
 characters. This fixes
 [CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).

Documentation

- Note what happens when `--check` is used with `--quiet`


To generate a diff of this commit:
cvs rdiff -u -r1.26 -r1.27 pkgsrc/textproc/py-black/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/textproc/py-black/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/py-black/Makefile
diff -u pkgsrc/textproc/py-black/Makefile:1.26 pkgsrc/textproc/py-black/Makefile:1.27
--- pkgsrc/textproc/py-black/Makefile:1.26      Tue Feb 13 05:06:48 2024
+++ pkgsrc/textproc/py-black/Makefile   Sat Mar 16 17:46:08 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.26 2024/02/13 05:06:48 adam Exp $
+# $NetBSD: Makefile,v 1.27 2024/03/16 17:46:08 adam Exp $
 
-DISTNAME=      black-24.2.0
+DISTNAME=      black-24.3.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    textproc devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=b/black/}

Index: pkgsrc/textproc/py-black/distinfo
diff -u pkgsrc/textproc/py-black/distinfo:1.23 pkgsrc/textproc/py-black/distinfo:1.24
--- pkgsrc/textproc/py-black/distinfo:1.23      Tue Feb 13 05:06:49 2024
+++ pkgsrc/textproc/py-black/distinfo   Sat Mar 16 17:46:08 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.23 2024/02/13 05:06:49 adam Exp $
+$NetBSD: distinfo,v 1.24 2024/03/16 17:46:08 adam Exp $
 
-BLAKE2s (black-24.2.0.tar.gz) = c719e308ec7210afa545be305a4d47a5fd3803b21f7e61fff0dbdd24c55c6290
-SHA512 (black-24.2.0.tar.gz) = 23a40d7b2463d657c849bc54745036a253c67df6c58cef210fa4ee3c820cd83f687e3661f765939a5da23f7b75b10bb59e8b233731f37f21dd0301129e3fb5ea
-Size (black-24.2.0.tar.gz) = 631598 bytes
+BLAKE2s (black-24.3.0.tar.gz) = 131da04f7ea287ad3e27adb41215685cd050a5d2886cb9585e39010c5d63c85e
+SHA512 (black-24.3.0.tar.gz) = 57e3b651009578f1d15b6e9ffb49d24be80885b2cf7ad48a68407862778ac2099d119e7ba6d58ddea4fc7fc21345435a7572a970baf882f763d9347868d5504b
+Size (black-24.3.0.tar.gz) = 634292 bytes