CVS commit: pkgsrc/www/py-urllib3

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jan  7 18:42:04 UTC 2026

Modified Files:
        pkgsrc/www/py-urllib3: Makefile distinfo

Log Message:
py-urllib3: updated to 2.6.3

2.6.3 (2026-01-07)

- Fixed a high-severity security issue where decompression-bomb safeguards of
  the streaming API were bypassed when HTTP redirects were followed.
- Started treating ``Retry-After`` times greater than 6 hours as 6 hours by
  default.
- Fixed ``urllib3.connection.VerifiedHTTPSConnection`` on Emscripten.


To generate a diff of this commit:
cvs rdiff -u -r1.70 -r1.71 pkgsrc/www/py-urllib3/Makefile
cvs rdiff -u -r1.56 -r1.57 pkgsrc/www/py-urllib3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-urllib3/Makefile
diff -u pkgsrc/www/py-urllib3/Makefile:1.70 pkgsrc/www/py-urllib3/Makefile:1.71
--- pkgsrc/www/py-urllib3/Makefile:1.70 Fri Dec 12 07:09:29 2025
+++ pkgsrc/www/py-urllib3/Makefile      Wed Jan  7 18:42:04 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.70 2025/12/12 07:09:29 adam Exp $
+# $NetBSD: Makefile,v 1.71 2026/01/07 18:42:04 adam Exp $
 
-DISTNAME=      urllib3-2.6.2
+DISTNAME=      urllib3-2.6.3
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=u/urllib3/}
@@ -11,15 +11,11 @@ COMMENT=    HTTP library with thread-safe c
 LICENSE=       mit
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-hatch-vcs>=0.4.0:../../devel/py-hatch-vcs
-TOOL_DEPENDS+= ${PYPKGPREFIX}-hatchling>=1.6.0:../../devel/py-hatchling
+TOOL_DEPENDS+= ${PYPKGPREFIX}-hatchling>=1.27.0:../../devel/py-hatchling
+TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools_scm>=8:../../devel/py-setuptools_scm
 # optional dependencies:
 # "socks"; higher requirement from dev_requirements.txt
 DEPENDS+=      ${PYPKGPREFIX}-Socks>=1.7.1:../../net/py-Socks
-# "secure"
-#PYTHON_VERSIONED_DEPENDENCIES+=       OpenSSL cryptography
-#DEPENDS+=     ${PYPKGPREFIX}-idna>=2.0.0:../../www/py-idna
-#DEPENDS+=     ${PYPKGPREFIX}-certifi>=0:../../www/py-certify
-# but also needs unpackaged urlib3-secure-extra
 
 # brotli, zstd
 .include "options.mk"

Index: pkgsrc/www/py-urllib3/distinfo
diff -u pkgsrc/www/py-urllib3/distinfo:1.56 pkgsrc/www/py-urllib3/distinfo:1.57
--- pkgsrc/www/py-urllib3/distinfo:1.56 Fri Dec 12 07:09:29 2025
+++ pkgsrc/www/py-urllib3/distinfo      Wed Jan  7 18:42:04 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.56 2025/12/12 07:09:29 adam Exp $
+$NetBSD: distinfo,v 1.57 2026/01/07 18:42:04 adam Exp $
 
-BLAKE2s (urllib3-2.6.2.tar.gz) = 88c68b6d2530261937e3ca94922895fce8e60ddb4135f4e838b84c62b9e130eb
-SHA512 (urllib3-2.6.2.tar.gz) = 6a12cd56ac3a437e3f7213ea0eb0456a71ac85e373df5c4b7dc52098ee0c181256d87bc17b1fe1a734d97f8d01589858178ea9b8bacddc46601de9e32f32cd23
-Size (urllib3-2.6.2.tar.gz) = 432930 bytes
+BLAKE2s (urllib3-2.6.3.tar.gz) = 82c42f2b9a36c49b4de453df830899035383b7cb289cc07d0f1ef06255130aa8
+SHA512 (urllib3-2.6.3.tar.gz) = 663c83a78908dac9bb05c7ac833183c2fdc2969d0662d21dd8751ba13c51880ee264f7804760f33ebdabfd1c1f04a5d44171a420396de6ae582f9789801b141c
+Size (urllib3-2.6.3.tar.gz) = 435556 bytes