git: 7a73a419cfbe - main - security/py-plaso: update to 20260512

From: Antoine Brodin <antoine_at_FreeBSD.org>
Date: Wed, 20 May 2026 14:56:29 UTC
The branch main has been updated by antoine:

URL: https://cgit.FreeBSD.org/ports/commit/?id=7a73a419cfbece317150db2a35db1ad7eda579ef

commit 7a73a419cfbece317150db2a35db1ad7eda579ef
Author:     Antoine Brodin <antoine@FreeBSD.org>
AuthorDate: 2026-05-20 14:55:41 +0000
Commit:     Antoine Brodin <antoine@FreeBSD.org>
CommitDate: 2026-05-20 14:56:15 +0000

    security/py-plaso: update to 20260512
---
 security/py-plaso/Makefile                                   |  7 +++----
 security/py-plaso/distinfo                                   |  6 +++---
 security/py-plaso/files/patch-plaso_output_winevt__rc.py     | 12 ++++++------
 security/py-plaso/files/patch-plaso_parsers_sqlite.py        |  4 ++--
 .../files/patch-plaso_parsers_sqlite__plugins_imessage.py    |  4 ++--
 .../patch-plaso_parsers_sqlite__plugins_windows__timeline.py |  4 ++--
 security/py-plaso/files/patch-pyproject.toml                 | 12 ++++++++++++
 .../files/patch-tests_storage_sqlite_sqlite__file.py         |  4 ++--
 8 files changed, 32 insertions(+), 21 deletions(-)

diff --git a/security/py-plaso/Makefile b/security/py-plaso/Makefile
index 234f54a7fb2d..5dccf3b21350 100644
--- a/security/py-plaso/Makefile
+++ b/security/py-plaso/Makefile
@@ -1,6 +1,5 @@
 PORTNAME=	plaso
-PORTVERSION=	20240826
-PORTREVISION=	2
+PORTVERSION=	20260512
 CATEGORIES=	security python
 MASTER_SITES=	https://github.com/log2timeline/plaso/releases/download/${PORTVERSION}/ \
 		LOCAL/antoine
@@ -43,7 +42,7 @@ RUN_DEPENDS=	libcaes>=a:security/libcaes \
 		${PYTHON_PKGNAMEPREFIX}psutil>=0:sysutils/py-psutil@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}pyparsing>=0:devel/py-pyparsing@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
-		${PYTHON_PKGNAMEPREFIX}pytsk>=0:sysutils/py-pytsk@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pytsk3>=0:sysutils/py-pytsk@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}pytz>=0:devel/py-pytz@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}pyzmq>=0:net/py-pyzmq@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}redis>=0:databases/py-redis@${PY_FLAVOR} \
@@ -53,7 +52,7 @@ RUN_DEPENDS=	libcaes>=a:security/libcaes \
 		${PYTHON_PKGNAMEPREFIX}xattr>=0:devel/py-xattr@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}xlsxwriter>=0:textproc/py-xlsxwriter@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}pyyaml>=0:devel/py-pyyaml@${PY_FLAVOR} \
-		${PYTHON_PKGNAMEPREFIX}yara>=0:security/py-yara@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}yara-python>=0:security/py-yara@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}zstd>=0:archivers/py-zstd@${PY_FLAVOR}
 TEST_DEPENDS=	${PYTHON_PKGNAMEPREFIX}fakeredis>=0:databases/py-fakeredis@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}mock>=0:devel/py-mock@${PY_FLAVOR}
diff --git a/security/py-plaso/distinfo b/security/py-plaso/distinfo
index 89e97705d81c..478996d04557 100644
--- a/security/py-plaso/distinfo
+++ b/security/py-plaso/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1739801390
-SHA256 (plaso-20240826.tar.gz) = 4ac3a65cf31b87e507edc4c4d628a693703a6f1b933553da2fbe402a2250ef30
-SIZE (plaso-20240826.tar.gz) = 196604839
+TIMESTAMP = 1779286465
+SHA256 (plaso-20260512.tar.gz) = 85789d8424d1f53d9ca65992d7b8335910d5883cb7f50ca3dcb37f553118a83a
+SIZE (plaso-20260512.tar.gz) = 199345836
diff --git a/security/py-plaso/files/patch-plaso_output_winevt__rc.py b/security/py-plaso/files/patch-plaso_output_winevt__rc.py
index 8513d7181c47..adde4caec04b 100644
--- a/security/py-plaso/files/patch-plaso_output_winevt__rc.py
+++ b/security/py-plaso/files/patch-plaso_output_winevt__rc.py
@@ -1,6 +1,6 @@
---- plaso/output/winevt_rc.py.orig	2024-06-08 09:38:22 UTC
+--- plaso/output/winevt_rc.py.orig	2026-05-12 13:50:02 UTC
 +++ plaso/output/winevt_rc.py
-@@ -16,7 +16,7 @@ class Sqlite3DatabaseFile(object):
+@@ -18,7 +18,7 @@ class Sqlite3DatabaseFile:
  
    _HAS_TABLE_QUERY = (
        'SELECT name FROM sqlite_master '
@@ -9,7 +9,7 @@
  
    def __init__(self):
      """Initializes the database file object."""
-@@ -166,7 +166,7 @@ class WinevtResourcesSqlite3DatabaseReader(object):
+@@ -168,7 +168,7 @@ class WinevtResourcesSqlite3DatabaseReader:
      """
      table_names = ['event_log_providers']
      column_names = ['event_log_provider_key']
@@ -18,7 +18,7 @@
  
      values_list = list(self._database_file.GetValues(
          table_names, column_names, condition))
-@@ -202,7 +202,7 @@ class WinevtResourcesSqlite3DatabaseReader(object):
+@@ -204,7 +204,7 @@ class WinevtResourcesSqlite3DatabaseReader:
        return None
  
      column_names = ['message_string']
@@ -27,7 +27,7 @@
  
      values = list(self._database_file.GetValues(
          [table_name], column_names, condition))
-@@ -290,7 +290,7 @@ class WinevtResourcesSqlite3DatabaseReader(object):
+@@ -292,7 +292,7 @@ class WinevtResourcesSqlite3DatabaseReader:
        return None
  
      column_names = ['value']
@@ -36,7 +36,7 @@
  
      values = list(self._database_file.GetValues(
          [table_name], column_names, condition))
-@@ -485,7 +485,7 @@ class WinevtResourcesHelper(object):
+@@ -784,7 +784,7 @@ class WinevtResourcesHelper:
          'windows_wevt_template_event'):
        # TODO: add message_file_identifiers to filter_expression
        filter_expression = (
diff --git a/security/py-plaso/files/patch-plaso_parsers_sqlite.py b/security/py-plaso/files/patch-plaso_parsers_sqlite.py
index 617764ff23a8..4521ed837644 100644
--- a/security/py-plaso/files/patch-plaso_parsers_sqlite.py
+++ b/security/py-plaso/files/patch-plaso_parsers_sqlite.py
@@ -1,6 +1,6 @@
---- plaso/parsers/sqlite.py.orig	2024-06-08 09:38:22 UTC
+--- plaso/parsers/sqlite.py.orig	2026-05-12 13:50:02 UTC
 +++ plaso/parsers/sqlite.py
-@@ -118,8 +118,8 @@ class SQLiteDatabase(object):
+@@ -117,8 +117,8 @@ class SQLiteDatabase:
    SCHEMA_QUERY = (
        'SELECT tbl_name, sql '
        'FROM sqlite_master '
diff --git a/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_imessage.py b/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_imessage.py
index 7e11a5b021d3..5fce3592abdf 100644
--- a/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_imessage.py
+++ b/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_imessage.py
@@ -1,6 +1,6 @@
---- plaso/parsers/sqlite_plugins/imessage.py.orig	2024-06-08 09:38:22 UTC
+--- plaso/parsers/sqlite_plugins/imessage.py.orig	2026-05-12 13:50:02 UTC
 +++ plaso/parsers/sqlite_plugins/imessage.py
-@@ -81,7 +81,7 @@ class IMessagePlugin(interface.SQLitePlugin):
+@@ -80,7 +80,7 @@ class IMessagePlugin(interface.SQLitePlugin):
  
    _CLIENT_VERSION_QUERY = (
        'SELECT key, value FROM _SqliteDatabaseProperties '
diff --git a/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_windows__timeline.py b/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_windows__timeline.py
index 19263bebcf9b..d76fd7e594eb 100644
--- a/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_windows__timeline.py
+++ b/security/py-plaso/files/patch-plaso_parsers_sqlite__plugins_windows__timeline.py
@@ -1,6 +1,6 @@
---- plaso/parsers/sqlite_plugins/windows_timeline.py.orig	2024-06-08 09:38:22 UTC
+--- plaso/parsers/sqlite_plugins/windows_timeline.py.orig	2026-05-12 13:50:02 UTC
 +++ plaso/parsers/sqlite_plugins/windows_timeline.py
-@@ -89,10 +89,10 @@ class WindowsTimelinePlugin(interface.SQLitePlugin):
+@@ -86,10 +86,10 @@ class WindowsTimelinePlugin(interface.SQLitePlugin):
    QUERIES = [
        (('SELECT StartTime, Payload, PackageName FROM Activity '
          'INNER JOIN Activity_PackageId ON Activity.Id = '
diff --git a/security/py-plaso/files/patch-pyproject.toml b/security/py-plaso/files/patch-pyproject.toml
new file mode 100644
index 000000000000..79c85e5be86d
--- /dev/null
+++ b/security/py-plaso/files/patch-pyproject.toml
@@ -0,0 +1,12 @@
+--- pyproject.toml.orig	2026-05-12 13:50:02 UTC
++++ pyproject.toml
+@@ -9,8 +9,7 @@ maintainers = [
+ maintainers = [
+     { name = "Log2Timeline maintainers", email = "log2timeline-maintainers@googlegroups.com" },
+ ]
+-license = "Apache-2.0"
+-license-files = ["ACKNOWLEDGEMENTS", "AUTHORS", "LICENSE"]
++license = {text = "Apache-2.0"}
+ readme = "README.md"
+ classifiers = [
+     "Development Status :: 4 - Beta",
diff --git a/security/py-plaso/files/patch-tests_storage_sqlite_sqlite__file.py b/security/py-plaso/files/patch-tests_storage_sqlite_sqlite__file.py
index 96cf800956fc..eaa94dbb120f 100644
--- a/security/py-plaso/files/patch-tests_storage_sqlite_sqlite__file.py
+++ b/security/py-plaso/files/patch-tests_storage_sqlite_sqlite__file.py
@@ -1,6 +1,6 @@
---- tests/storage/sqlite/sqlite_file.py.orig	2024-06-08 09:38:23 UTC
+--- tests/storage/sqlite/sqlite_file.py.orig	2026-05-12 13:50:03 UTC
 +++ tests/storage/sqlite/sqlite_file.py
-@@ -136,13 +136,13 @@ class SQLiteStorageFileTest(test_lib.StorageTestCase):
+@@ -134,13 +134,13 @@ class SQLiteStorageFileTest(test_lib.StorageTestCase):
              event_data_stream.CONTAINER_TYPE, column_names=column_names))
          self.assertEqual(len(containers), 1)