py-black: updated to 24.3.0

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you
run Black on untrusted input, or if you habitually put thousands of leading tab
characters in your docstrings, you are strongly encouraged to upgrade immediately to fix
[CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).

This release also fixes a bug in Black's AST safety check that allowed Black to make
incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

- Don't move comments along with delimiters, which could cause crashes
- Strengthen AST safety check to catch more unsafe changes to strings. Previous versions
 of Black would incorrectly format the contents of certain unusual f-strings containing
 nested strings with the same quote type. Now, Black will crash on such strings until
 support for the new f-string syntax is implemented.
- Fix a bug where line-ranges exceeding the last code line would not work as expected

Performance

- Fix catastrophic performance on docstrings that contain large numbers of leading tab
 characters. This fixes
 [CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).

Documentation

- Note what happens when `--check` is used with `--quiet`
This commit is contained in:
adam 2024-03-16 17:46:08 +00:00
parent dc56662db5
commit 8106c7150a
2 changed files with 6 additions and 6 deletions

View File

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.26 2024/02/13 05:06:48 adam Exp $
# $NetBSD: Makefile,v 1.27 2024/03/16 17:46:08 adam Exp $
DISTNAME= black-24.2.0
DISTNAME= black-24.3.0
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
CATEGORIES= textproc devel python
MASTER_SITES= ${MASTER_SITE_PYPI:=b/black/}

View File

@ -1,5 +1,5 @@
$NetBSD: distinfo,v 1.23 2024/02/13 05:06:49 adam Exp $
$NetBSD: distinfo,v 1.24 2024/03/16 17:46:08 adam Exp $
BLAKE2s (black-24.2.0.tar.gz) = c719e308ec7210afa545be305a4d47a5fd3803b21f7e61fff0dbdd24c55c6290
SHA512 (black-24.2.0.tar.gz) = 23a40d7b2463d657c849bc54745036a253c67df6c58cef210fa4ee3c820cd83f687e3661f765939a5da23f7b75b10bb59e8b233731f37f21dd0301129e3fb5ea
Size (black-24.2.0.tar.gz) = 631598 bytes
BLAKE2s (black-24.3.0.tar.gz) = 131da04f7ea287ad3e27adb41215685cd050a5d2886cb9585e39010c5d63c85e
SHA512 (black-24.3.0.tar.gz) = 57e3b651009578f1d15b6e9ffb49d24be80885b2cf7ad48a68407862778ac2099d119e7ba6d58ddea4fc7fc21345435a7572a970baf882f763d9347868d5504b
Size (black-24.3.0.tar.gz) = 634292 bytes