Subject: CVS commit: pkgsrc/devel/py-joblib
From: Adam Ciarcinski
Date: 2022-11-21 10:35:31
Message id: 20221121093531.A2670FA90@cvs.NetBSD.org

Log Message:
py-joblib: updated to 1.2.0

Release 1.2.0
Fix a security issue where eval(pre_dispatch) could potentially run arbitrary \ 
code. Now only basic numerics are supported. \ 
https://github.com/joblib/joblib/pull/1327
Make sure that joblib works even when multiprocessing is not available, for \ 
instance with Pyodide https://github.com/joblib/joblib/pull/1256
Avoid unnecessary warnings when workers and main process delete the temporary \ 
memmap folder contents concurrently. https://github.com/joblib/joblib/pull/1263
Fix memory alignment bug for pickles containing numpy arrays. This is especially \ 
important when loading the pickle with mmap_mode != None as the resulting \ 
numpy.memmap object would not be able to correct the misalignment without \ 
performing a memory copy. This bug would cause invalid computation and \ 
segmentation faults with native code that would directly access the underlying \ 
data buffer of a numpy array, for instance C/C++/Cython code compiled with older \ 
GCC versions or some old OpenBLAS written in platform specific assembly. \ 
https://github.com/joblib/joblib/pull/1254
Vendor cloudpickle 2.2.0 which adds support for PyPy 3.8+.
Vendor loky 3.3.0 which fixes several bugs including:
robustly forcibly terminating worker processes in case of a crash \ 
(https://github.com/joblib/joblib/pull/1269);
avoiding leaking worker processes in case of nested loky parallel calls;
reliability spawn the correct number of reusable workers.

Files:
RevisionActionfile
1.15modifypkgsrc/devel/py-joblib/Makefile
1.9modifypkgsrc/devel/py-joblib/PLIST
1.16modifypkgsrc/devel/py-joblib/distinfo