<pre style='margin:0'>
Joshua Root (jmroot) pushed a commit to branch master
in repository macports-ports.
</pre>
<p><a href="https://github.com/macports/macports-ports/commit/1efddb9535650d0e0409250053d8518a64fd3de7">https://github.com/macports/macports-ports/commit/1efddb9535650d0e0409250053d8518a64fd3de7</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'> new 1efddb95356 py-lxml: update to 5.3.2
</span>1efddb95356 is described below
<span style='display:block; white-space:pre;color:#808000;'>commit 1efddb9535650d0e0409250053d8518a64fd3de7
</span>Author: Joshua Root <jmr@macports.org>
AuthorDate: Sun Apr 6 12:33:50 2025 +1000
<span style='display:block; white-space:pre;color:#404040;'> py-lxml: update to 5.3.2
</span><span style='display:block; white-space:pre;color:#404040;'>
</span><span style='display:block; white-space:pre;color:#404040;'> Resolves CVE-2025-24928.
</span><span style='display:block; white-space:pre;color:#404040;'>
</span><span style='display:block; white-space:pre;color:#404040;'> Closes: https://trac.macports.org/ticket/72295
</span>---
python/py-lxml/Portfile | 18 ++++++++++--------
python/py-lxml/files/pyproject.toml.patch | 9 +++++++++
2 files changed, 19 insertions(+), 8 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/python/py-lxml/Portfile b/python/py-lxml/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 48e0eb7e93d..fd7a011193f 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/python/py-lxml/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/python/py-lxml/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -5,7 +5,7 @@ PortGroup compiler_blacklist_versions 1.0
</span> PortGroup python 1.0
name py-lxml
<span style='display:block; white-space:pre;background:#ffe0e0;'>-version 5.3.1
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+version 5.3.2
</span> revision 0
categories-append devel
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -22,9 +22,10 @@ long_description lxml is a Pythonic binding for the libxml2 and \
</span>
homepage https://lxml.de/
<span style='display:block; white-space:pre;background:#ffe0e0;'>-checksums rmd160 0f2cb0ad255b17222122a5a4f63df11de9516578 \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 106b7b5d2977b339f1e97efe2778e2ab20e99994cbb0ec5e55771ed0795920c8 \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- size 3678591
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+checksums md5 337aba1e980c5549b65fd72bb7d24a1a \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ rmd160 6539e08676e6a55ec2adf30ad587ef11f3a4620f \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 773947d0ed809ddad824b7b14467e1a481b8976e87278ac4a730c2f7c7fcddc1 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 3679948
</span>
python.versions 27 35 36 37 38 39 310 311 312 313
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -35,13 +36,14 @@ if {${name} ne ${subport}} {
</span> checksums rmd160 edd377fe2e214c69db4e468583ac507cf71853a7 \
sha256 6399703c40ba53e2c3b72fdb56cb908d2b83c08082ecf17de839b27e68d1e598 \
size 3862433
<span style='display:block; white-space:pre;background:#ffe0e0;'>-
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- depends_build-append \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- port:py${python.version}-setuptools
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ }
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if {${python.version} >= 38} {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ patchfiles-append pyproject.toml.patch
</span> }
depends_build-append \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- port:py${python.version}-cython
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ port:py${python.version}-cython \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ port:py${python.version}-setuptools
</span>
depends_lib-append \
port:zlib \
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/python/py-lxml/files/pyproject.toml.patch b/python/py-lxml/files/pyproject.toml.patch
</span>new file mode 100644
<span style='display:block; white-space:pre;color:#808080;'>index 00000000000..3a3af7eae0a
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>--- /dev/null
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/python/py-lxml/files/pyproject.toml.patch
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -0,0 +1,9 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- pyproject.toml.orig 2025-04-05 20:30:43
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ pyproject.toml 2025-04-06 12:28:29
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1,5 +1,5 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ [build-system]
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-requires = ["Cython>=3.0.11, < 3.1.0", "setuptools", "wheel"]
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++requires = ["Cython>=3.0.11, < 3.1.0", "setuptools"]
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ [tool.cibuildwheel]
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ build-verbosity = 1
</span></pre><pre style='margin:0'>
</pre>