[Bug 229322] net/py-urllib3: Update to 1.25.6

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229322

--- Comment #34 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kai
Date: Tue Nov 26 18:37:59 UTC 2019
New revision: 518476
URL: https://svnweb.freebsd.org/changeset/ports/518476

Log:
  net/py-urllib3: Update to 1.25.6

  * Convert the RUN_DEPENDS into separate OPTIONS as they are listed as extra
    dependencies in setup.py.  Also set those as default that contain the
    previous RUN_DEPENDS to allow a clean transition.

  * Remove the Python-specific version limitation for security/py-certifi
    because it's required for all Python versions.

  * Also remove the info about the broken IPv6 support of net/py-socks (was
    broken in 1.5.7) and the relevant patch as both are obsolete.

  * Update the TEST_DEPENDS and add a "do-test" target to make future QA
easier.

  Please note that a MFH won't be done as it didn't get an approval because
  there are too much changes to make it work in the 2019Q4 branch. [1]

  Notable changes since 1.22:

  * Require and validate certificates by default when using HTTPS.

  * Add mitigation for BPO-37428 affecting Python < 3.7.4 and OpenSSL 1.1.1+
    which caused certificate verification to be enabled when using
    "cert_reqs=CERT_NONE".

  * Add TLSv1.3 support to CPython, pyOpenSSL and SecureTransport "SSLContext"
    implementations.

  https://github.com/urllib3/urllib3/blob/1.25.6/CHANGES.rst

  Exp-run by:   antoine
  PR:           229322 [1]
  Reported by:  Patrice Clement <monsieurp at gentoo.org>
  Security:     87270ba5-03d3-11ea-b81f-3085a9a95629

Changes:
  head/UPDATING
  head/net/py-urllib3/Makefile
  head/net/py-urllib3/distinfo
  head/net/py-urllib3/files/patch-setup.py
  head/net/py-urllib3/files/pkg-message.in

-- 
You are receiving this mail because:
You are on the CC list for the bug.