CVS commit: pkgsrc/net/py-twisted

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gdt
Date:           Sat Aug 10 13:50:13 UTC 2024

Modified Files:
        pkgsrc/net/py-twisted: Makefile.common PLIST distinfo

Log Message:
net/py-twisted: Update to 24.7.0

This release carries a significant security fix.

Upstream NEWS:

Twisted 24.7.0 (2024-08-08)
===========================

24.7.0.rc2 fixed an unreleased regression caused by PR 12109. (#12279)
No other changes since 24.7.0.rc2

Security Advisories
-------------------

- twisted.web.util.redirectTo now HTML-escapes the provided URL in the fallback response body it returns (GHSA-cf56-g6w6-pqq2, CVE-2024-41810). (#9839)
- The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure (CVE-2024-41671/GHSA-c8m8-j448-xjx7) (#12248)

Features
--------

- twisted.protocols.ftp now supports the IPv6 extensions defined in RFC 2428. (#9645)
- twisted.internet.defer.inlineCallbacks can now yield a coroutine. (#9972)
- twisted.python._shellcomp.ZshArgumentsGenerator was updated for Python 3.13. (#12065)
- twisted.web.wsgi request environment now contains the peer port number as `REMOTE_PORT`. (#12096)
- twisted.internet.defer.Deferred.callback() and twisted.internet.defer.Deferred.addCallbacks() no longer use `assert` to check the type of the arguments. You should now use type checking to validate 
your code. These changes were done to reduce the CPU usage. (#12122)
- Added two new methods, twisted.logger.Logger.failuresHandled and twisted.logger.Logger.failureHandler, which allow for more concise and convenient handling of exceptions when dispatching out to 
application code.  The former can arbitrarily customize failure handling at the call site, and the latter can be used for performance-sensitive cases where no additional information needs to be 
logged. (#12188)
- twisted.internet.defer.Deferred.addCallback now runs about 10% faster. (#12223)
- twisted.internet.defer.Deferred error handling is now faster, taking 40% less time to run. (#12227)

Deprecations and Removals
-------------------------

- twisted.internet.defer.returnValue has been deprecated. You can replace it with the standard `return` statement. (#9930)
- The `twisted-iocpsupport` is no longer a hard dependency on Windows.
  The IOCP support is now installed together with the other Windows soft
  dependencies via `twisted[windows-platform]`. (#11893)
- twisted.python.deprecate helper function will now always strip whitespaces from the docstrings.
  This is done to have the same behaviour as with Python 3.13. (#12063)
- twisted.conch.manhole.ManholeInterpreter.write, twisted.conch.manhole.ManholeInterpreter.addOutput, twisted.mail.imap4.IMAP4Server.sendUntaggedResponse `async` argument, deprecated since 18.9.0, 
has been removed. (#12130)
- twisted.web.soap was removed.
  The SOAP support was already broken, for at least the last 4 years.
  The SOAP support in Twisted has no active maintainer. (#12146)

Web
---

Features
~~~~~~~~

- twisted.web.agent.Agent now allows duplicate Content-Length headers having the same value, per RFC 9110 section 8.6. It is otherwise more strict when parsing Content-Length header values. (#9064)
- twisted.web.client.HTTPConnectionPool used by HTTP clients now runs faster by using a little less CPU. (#12108)
- twisted.web.http_headers now uses less CPU, making a small HTTP client request 10% faster or so. (#12116)
- twisted.web's HTTP/1.1 server now runs a little faster, with about 10% lower CPU overhead. (#12133)
- twisted.web's HTTP 1.1 server is an additional 5% faster. (#12155)

Deprecations and Removals
~~~~~~~~~~~~~~~~~~~~~~~~~

- twisted.web.util.ChildRedirector, which has never worked on Python 3, has been removed. (#9591)
- ``twisted.web.http.Request.setResponseCode()`` no longer validates the types of inputs; we encourage you to use a type checker like mypy to catch these sort of errors. The long-deprecated 
``twisted.web.server.string_date_time()`` and ``twisted.web.server.date_time_string()`` APIs were removed altogether. (#12133)
- twisted.web.http.HTTPClient is now deprecated in favor of twisted.web.client.Agent (#12158)


To generate a diff of this commit:
cvs rdiff -u -r1.51 -r1.52 pkgsrc/net/py-twisted/Makefile.common
cvs rdiff -u -r1.38 -r1.39 pkgsrc/net/py-twisted/PLIST
cvs rdiff -u -r1.47 -r1.48 pkgsrc/net/py-twisted/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/py-twisted/Makefile.common
diff -u pkgsrc/net/py-twisted/Makefile.common:1.51 pkgsrc/net/py-twisted/Makefile.common:1.52
--- pkgsrc/net/py-twisted/Makefile.common:1.51  Fri Apr  5 17:31:54 2024
+++ pkgsrc/net/py-twisted/Makefile.common       Sat Aug 10 13:50:13 2024
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.51 2024/04/05 17:31:54 adam Exp $
+# $NetBSD: Makefile.common,v 1.52 2024/08/10 13:50:13 gdt Exp $
 #
 # used by net/py-twisted/Makefile
 # used by net/py-twisted-docs/Makefile
 
-DISTNAME=      twisted-24.3.0
+DISTNAME=      twisted-24.7.0
 CATEGORIES=    net python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=T/Twisted/}
 

Index: pkgsrc/net/py-twisted/PLIST
diff -u pkgsrc/net/py-twisted/PLIST:1.38 pkgsrc/net/py-twisted/PLIST:1.39
--- pkgsrc/net/py-twisted/PLIST:1.38    Fri Apr  5 17:31:54 2024
+++ pkgsrc/net/py-twisted/PLIST Sat Aug 10 13:50:13 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.38 2024/04/05 17:31:54 adam Exp $
+@comment $NetBSD: PLIST,v 1.39 2024/08/10 13:50:13 gdt Exp $
 bin/cftp-${PYVERSSUFFIX}
 bin/ckeygen-${PYVERSSUFFIX}
 bin/conch-${PYVERSSUFFIX}
@@ -1535,9 +1535,6 @@ ${PYSITELIB}/twisted/python/test/test_ur
 ${PYSITELIB}/twisted/python/test/test_util.py
 ${PYSITELIB}/twisted/python/test/test_util.pyc
 ${PYSITELIB}/twisted/python/test/test_util.pyo
-${PYSITELIB}/twisted/python/test/test_versions.py
-${PYSITELIB}/twisted/python/test/test_versions.pyc
-${PYSITELIB}/twisted/python/test/test_versions.pyo
 ${PYSITELIB}/twisted/python/test/test_win32.py
 ${PYSITELIB}/twisted/python/test/test_win32.pyc
 ${PYSITELIB}/twisted/python/test/test_win32.pyo
@@ -1776,6 +1773,12 @@ ${PYSITELIB}/twisted/test/stdio_test_con
 ${PYSITELIB}/twisted/test/stdio_test_halfclose.py
 ${PYSITELIB}/twisted/test/stdio_test_halfclose.pyc
 ${PYSITELIB}/twisted/test/stdio_test_halfclose.pyo
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy.py
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy.pyc
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy.pyo
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy_write.py
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy_write.pyc
+${PYSITELIB}/twisted/test/stdio_test_halfclose_buggy_write.pyo
 ${PYSITELIB}/twisted/test/stdio_test_hostpeer.py
 ${PYSITELIB}/twisted/test/stdio_test_hostpeer.pyc
 ${PYSITELIB}/twisted/test/stdio_test_hostpeer.pyo
@@ -2294,9 +2297,6 @@ ${PYSITELIB}/twisted/web/script.pyo
 ${PYSITELIB}/twisted/web/server.py
 ${PYSITELIB}/twisted/web/server.pyc
 ${PYSITELIB}/twisted/web/server.pyo
-${PYSITELIB}/twisted/web/soap.py
-${PYSITELIB}/twisted/web/soap.pyc
-${PYSITELIB}/twisted/web/soap.pyo
 ${PYSITELIB}/twisted/web/static.py
 ${PYSITELIB}/twisted/web/static.pyc
 ${PYSITELIB}/twisted/web/static.pyo
@@ -2372,9 +2372,6 @@ ${PYSITELIB}/twisted/web/test/test_resou
 ${PYSITELIB}/twisted/web/test/test_script.py
 ${PYSITELIB}/twisted/web/test/test_script.pyc
 ${PYSITELIB}/twisted/web/test/test_script.pyo
-${PYSITELIB}/twisted/web/test/test_soap.py
-${PYSITELIB}/twisted/web/test/test_soap.pyc
-${PYSITELIB}/twisted/web/test/test_soap.pyo
 ${PYSITELIB}/twisted/web/test/test_stan.py
 ${PYSITELIB}/twisted/web/test/test_stan.pyc
 ${PYSITELIB}/twisted/web/test/test_stan.pyo

Index: pkgsrc/net/py-twisted/distinfo
diff -u pkgsrc/net/py-twisted/distinfo:1.47 pkgsrc/net/py-twisted/distinfo:1.48
--- pkgsrc/net/py-twisted/distinfo:1.47 Fri Apr  5 17:31:54 2024
+++ pkgsrc/net/py-twisted/distinfo      Sat Aug 10 13:50:13 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.47 2024/04/05 17:31:54 adam Exp $
+$NetBSD: distinfo,v 1.48 2024/08/10 13:50:13 gdt Exp $
 
-BLAKE2s (twisted-24.3.0.tar.gz) = 1fd880036d607c056258c9e18626c56218417af9557849d91766e2f0a86d56e6
-SHA512 (twisted-24.3.0.tar.gz) = c3dd227f5936ffa586a0b7447f5df4c2257dce0c0ba740373d82197a72029e7eeb0aef9789247dde73e2f24dd043f3b0b7d795f16e6e908583b054aad9b9eb6a
-Size (twisted-24.3.0.tar.gz) = 3500456 bytes
+BLAKE2s (twisted-24.7.0.tar.gz) = 1802931a71c53835594a95c94bdcffbc418d9a250d627a9eff0e4f12ad818a9e
+SHA512 (twisted-24.7.0.tar.gz) = cd5a993c8f1dfdc82597bdc095e07c1016a2a86d1ce5b011b27f9f760db428fcba4579dda5733244979827f9c772c2480d1d419d2d24ae7af8697e2b8e852f62
+Size (twisted-24.7.0.tar.gz) = 3516844 bytes