Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Feb 2022 14:26:33 +0000
From:      bugzilla-noreply@freebsd.org
To:        python@FreeBSD.org
Subject:   [Bug 261791] devel/py-twisted: Update to 22.1.0 (includes a security update)
Message-ID:  <bug-261791-21822@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D261791

            Bug ID: 261791
           Summary: devel/py-twisted: Update to 22.1.0 (includes a
                    security update)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://github.com/twisted/twisted/releases/tag/twiste
                    d-22.1.0
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: python@FreeBSD.org
          Reporter: ports@skyforge.at
          Assignee: python@FreeBSD.org
             Flags: maintainer-feedback?(python@FreeBSD.org)

Created attachment 231643
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D231643&action=
=3Dedit
devel/py-twisted: Update to 22.1.0

This patch updates devel/py-twisted to 22.1.0, which includes a security fi=
x,
see [1]. The update should be fairly unspectacular from a ports perspective=
 as
it's mostly a version bump, but testing it is a bit difficult as the ports
testsuite doesn't pass (which is a rather traditional problem at this point=
).
I've also moved py-Hamcrest to the test dependencies, as it's mentioned as =
an
exclusive test dependency in setup.cfg and appears to occur only in
test-related functions in the source itself. As such:

* portlint: OK
* testport: OK (poudriere: 130amd64)
* do-test: "OK" (FAILED (skips=3D1829, failures=3D8, errors=3D11, successes=
=3D10240))

The testsuite failures mostly center around issues with directly executing =
the
git command (despite being installed an in PATH) and a missing python
dependency that's exclusively used for a few tests and not currently packag=
ed
in ports and appear to be fixable, but I currently lack the time to dive in=
to
the problem.

To provide some more QA, using the port still allows the testsuites of
net-im/py-matrix-synapse and www/treq to pass without issues. I've also used
the resulting package for running synapse in production without encountering
any problems.=20

I'm currently attempting to build the other consumers of this port and will
report on the results of that once that's done, but my testbox is quite slo=
w,
at least as soon as rust and llvm need to be built.


I'll also try and write a suitable vuxml entry and add it to this PR.

Cheers,
Sascha

[1] https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-x=
vvx

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-261791-21822>