[Bug 261791] devel/py-twisted: Update to 22.1.0 (includes a security update)

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 08 Feb 2022 14:26:33 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261791

            Bug ID: 261791
           Summary: devel/py-twisted: Update to 22.1.0 (includes a
                    security update)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://github.com/twisted/twisted/releases/tag/twiste
                    d-22.1.0
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: python@FreeBSD.org
          Reporter: ports@skyforge.at
          Assignee: python@FreeBSD.org
             Flags: maintainer-feedback?(python@FreeBSD.org)

Created attachment 231643
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=231643&action=edit
devel/py-twisted: Update to 22.1.0

This patch updates devel/py-twisted to 22.1.0, which includes a security fix,
see [1]. The update should be fairly unspectacular from a ports perspective as
it's mostly a version bump, but testing it is a bit difficult as the ports
testsuite doesn't pass (which is a rather traditional problem at this point).
I've also moved py-Hamcrest to the test dependencies, as it's mentioned as an
exclusive test dependency in setup.cfg and appears to occur only in
test-related functions in the source itself. As such:

* portlint: OK
* testport: OK (poudriere: 130amd64)
* do-test: "OK" (FAILED (skips=1829, failures=8, errors=11, successes=10240))

The testsuite failures mostly center around issues with directly executing the
git command (despite being installed an in PATH) and a missing python
dependency that's exclusively used for a few tests and not currently packaged
in ports and appear to be fixable, but I currently lack the time to dive into
the problem.

To provide some more QA, using the port still allows the testsuites of
net-im/py-matrix-synapse and www/treq to pass without issues. I've also used
the resulting package for running synapse in production without encountering
any problems. 

I'm currently attempting to build the other consumers of this port and will
report on the results of that once that's done, but my testbox is quite slow,
at least as soon as rust and llvm need to be built.


I'll also try and write a suitable vuxml entry and add it to this PR.

Cheers,
Sascha

[1] https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx

-- 
You are receiving this mail because:
You are the assignee for the bug.