CVS commit: pkgsrc/devel/py-wheel

"Adam Ciarcinski" <[email protected]>
Newsgroups gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID <[email protected]>
Module Name:	pkgsrc
Committed By:	adam
Date:		Wed Aug 12 07:58:55 UTC 2026

Modified Files:
	pkgsrc/devel/py-wheel: Makefile distinfo

Log Message:
py-wheel: updated to 0.48.0

**0.48.0** (2026-08-12)

- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or remove a
  PEP 440 local version identifier from a wheel
- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata versions
- Fixed ``wheel tags`` producing invalid archives when retagging wheels whose
  entries use ZIP64, by dropping the central-directory ZIP64 extra field that is
  not valid in a local file header
- Fixed ``wheel convert`` writing the converted wheel outside the destination
  directory when the input archive contained a maliciously crafted project name
  or version with path separators (arbitrary file write / path traversal)


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 pkgsrc/devel/py-wheel/Makefile
cvs rdiff -u -r1.34 -r1.35 pkgsrc/devel/py-wheel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed) (text/x-diff, 1.5 KB)
Modified files:

Index: pkgsrc/devel/py-wheel/Makefile
diff -u pkgsrc/devel/py-wheel/Makefile:1.45 pkgsrc/devel/py-wheel/Makefile:1.46
--- pkgsrc/devel/py-wheel/Makefile:1.45	Fri Apr 24 11:08:02 2026
+++ pkgsrc/devel/py-wheel/Makefile	Wed Aug 12 07:58:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.45 2026/04/24 11:08:02 adam Exp $
+# $NetBSD: Makefile,v 1.46 2026/08/12 07:58:54 adam Exp $
 
-DISTNAME=	wheel-0.47.0
+DISTNAME=	wheel-0.48.0
 PKGNAME=	${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=	devel python
 MASTER_SITES=	${MASTER_SITE_PYPI:=w/wheel/}

Index: pkgsrc/devel/py-wheel/distinfo
diff -u pkgsrc/devel/py-wheel/distinfo:1.34 pkgsrc/devel/py-wheel/distinfo:1.35
--- pkgsrc/devel/py-wheel/distinfo:1.34	Fri Apr 24 11:08:02 2026
+++ pkgsrc/devel/py-wheel/distinfo	Wed Aug 12 07:58:54 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.34 2026/04/24 11:08:02 adam Exp $
+$NetBSD: distinfo,v 1.35 2026/08/12 07:58:54 adam Exp $
 
-BLAKE2s (wheel-0.47.0.tar.gz) = 40f8140c14520d86ff78f6f0d6ec39e34b6c75509b130ce7e248bbd224c375fa
-SHA512 (wheel-0.47.0.tar.gz) = cf2010e36c031ba47f6302a233811e57f0187244b06cdeff5ae5d2fb6cc16dfba594facbb3f58f795ec308d71a8a0332d09e610bb8720f2c9e8942a914bf3bc4
-Size (wheel-0.47.0.tar.gz) = 63854 bytes
+BLAKE2s (wheel-0.48.0.tar.gz) = 40737791d9f33c7f879d7b6e52e1ca1b18164706df3e32fbe2f754138a9b99c4
+SHA512 (wheel-0.48.0.tar.gz) = 5890947bc1c4dd02e73f85afddf19122c712d3e5ae67dec96562246e6ac9df7a3380a57c2bb0dde21f103622e8d71e02c36d8ba7bc2fd23c8fdab362a059f653
+Size (wheel-0.48.0.tar.gz) = 66471 bytes
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.