Subject: CVS commit: pkgsrc/net/py-twisted
From: Adam Ciarcinski
Date: 2022-08-10 10:59:35
Message id: 20220810085935.C0513FB1A@cvs.NetBSD.org

Log Message:
py-twisted: updated to 22.4.0

Twisted 22.4.0 (2022-04-11)
===========================

Features
--------
- twisted.python.failure.Failure tracebacks now capture module information, \ 
improving compatibility with the Raven Sentry client.
- twisted.python.failure.Failure objects are now compatible with dis.distb, \ 
improving compatibility with post-mortem debuggers.

Bugfixes
- twisted.internet.interfaces.IReactorSSL.listenSSL now has correct type annotations.
- twisted.internet.test.test_glibbase.GlibReactorBaseTests now passes.

Conch
-----

Features
- twisted.conch.ssh now supports using RSA keys with SHA-2 signatures (RFC 8332) \ 
when acting as a server.  The rsa-sha2-512 and rsa-sha2-256 public key signature \ 
algorithms are automatically preferred over ssh-rsa if the client advertises \ 
support for them; the actual public keys do not need to change.
- twisted.conch.ssh now has an alternative Ed25519 implementation using PyNaCl, \ 
in order to support platforms that lack OpenSSL >= 1.1.1b.  The new \ 
"conch_nacl" extra has the necessary dependency.

Web
---

Features
- Twisted is now compatible with h2 4.x.x.

Bugfixes
- twisted.web.http had several several defects in HTTP request parsing that \ 
could permit HTTP request smuggling. It now disallows signed Content-Length \ 
headers, forbids illegal characters in chunked extensions, forbids a ``0x`` \ 
prefix to chunk lengths, and only strips spaces and horizontal tab characters \ 
from header values. These changes address CVE-2022-24801 and \ 
GHSA-c2jg-hw38-jrqq.

Mail
----
Bugfixes
- twisted.mail.pop3.APOPCredentials is now correctly marked as implementing \ 
twisted.cred.credentials.IUsernamHashedPassword, rather than IUsernamePassword.

Trial
-----
Features
- `trial --until-failure --jobs=N` now reports the number of each test pass as \ 
it begins.

Bugfixes
- twisted.trial.unittest.TestCase now discards cleanup functions after running \ 
them.  Notably, this prevents them from being run an ever growing number of \ 
times with `trial -u ...`.

Twisted 22.2.0 (2022-03-01)
===========================

Bugfixes
- twisted.internet.gireactor.PortableGIReactor.simulate and \ 
twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer raises \ 
TypeError when there are no delayed called. This was a regression introduced \ 
with the migration to Python 3 in which the builtin `min` function no longer \ 
accepts `None` as an argument.
- twisted.conch.ssh.transport.SSHTransportBase now disconnects the remote peer if the
  SSH version string is not sent in the first 4096 bytes.
  GHSA-rv6r-3f5q-9rgx)

Improved Documentation
- Add type annotations for twisted.web.http.Request.getHeader.

Deprecations and Removals
- Support for Python 3.6, which is EoL as of 2021-09-04, has been deprecated.

Files:
RevisionActionfile
1.51modifypkgsrc/net/py-twisted/Makefile
1.47modifypkgsrc/net/py-twisted/Makefile.common
1.34modifypkgsrc/net/py-twisted/PLIST
1.43modifypkgsrc/net/py-twisted/distinfo