BSD Portsnet/py-urllib3 2.8.0,1 MidnightBSD
HTTP library with thread-safe connection pooling, file post, and more
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- Last update
- Commit
2869f9e034- License
- mit
- Categories
- net, python
Description
urllib3 is a powerful, sanity-friendly HTTP client for Python. Much of the Python ecosystem already uses urllib3 and you should too. urllib3 brings many critical features that are missing from the Python standard libraries:
- Thread safety.
- Connection pooling.
- Client-side SSL/TLS verification.
- File uploads with multipart encoding.
- Helpers for retrying requests and dealing with HTTP redirects.
- Support for gzip and deflate encoding.
- Proxy support for HTTP and SOCKS.
- 100% test coverage.
In the other systems
| System | Port | Version |
|---|---|---|
| MidnightBSD | net/py-urllib3 | 2.8.0,1 |
| FreeBSD | net/py-urllib3 | 2.8.0,1 |
| DragonFly | net/py-urllib3 | 1.26.20,1 |
| HardenedBSD | net/py-urllib3 | 2.8.0,1 |
| GhostBSD | net/py-urllib3 | 2.8.0,1 |
| OPNsense | net/py-urllib3 | 2.7.0,1 |
Install
Binary package:
mport install ${PYTHON_PKGNAMEPREFIX}urllib3From mports:
cd /usr/mports/net/py-urllib3 && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}urllib3>0:net/py-urllib3Dependencies
As this port's Makefile names them.
Build 3
${PYTHON_PKGNAMEPREFIX}hatch-vcs>=0.4.0<0.6.0: devel/py-hatch-vcs${PYTHON_PKGNAMEPREFIX}hatchling>=1.27.0<2: devel/py-hatchling${PYTHON_PKGNAMEPREFIX}setuptools-scm>=8<11: devel/py-setuptools-scm
Test 10
${PYTHON_PKGNAMEPREFIX}brotli>=1.2.0: archivers/py-brotli${PYTHON_PKGNAMEPREFIX}h2>=4<5: www/py-h2${PYTHON_PKGNAMEPREFIX}httpx>=0.28.1: www/py-httpx${PYTHON_PKGNAMEPREFIX}pyopenssl>=25.0.0,1: security/py-pyopenssl${PYTHON_PKGNAMEPREFIX}pysocks>=1.5.6<2.0: net/py-pysocks${PYTHON_PKGNAMEPREFIX}pytest-timeout>=2.3.1: devel/py-pytest-timeout${PYTHON_PKGNAMEPREFIX}quart>=0.20.0: www/py-quart${PYTHON_PKGNAMEPREFIX}quart-trio>=0.12.0: www/py-quart-trio${PYTHON_PKGNAMEPREFIX}trio>=0.27.0: net/py-trio${PYTHON_PKGNAMEPREFIX}trustme>=1.2.1: security/py-trustme
Build dependencies 3
Required by 20
- ai/py-google-genai
- ai/py-mistral-vibe
- ai/py-torchdata
- ai/py-tritonclient
- devel/py-databricks-sdk
- devel/py-dulwich
- devel/py-geventhttpclient
- devel/py-responses
- devel/py-sentry-sdk
- devel/py-twine
- misc/memo
- multimedia/streamlink
- net/py-blobfile
- sysutils/conan
- sysutils/duplicity
- sysutils/py-docker
- textproc/py-elasticsearch
- www/py-requests
- www/py-requests-cache
- www/yt-dlp
Configuration
Options name: net_urllib3
| Option | Default | Description |
|---|---|---|
| BROTLI | off | |
| H2 | off | HTTP/2 protocol |
| SOCKS | on | |
| ZSTD | off |
- USES
- cpe python
- Service scripts
- none
Files
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| urllib3-2.8.0.tar.gz | 458972 | 63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63 |
Master sites 2
- PYPI
- https://github.com/urllib3/urllib3/releases/download/2.8.0/
Commit history 4
| Date | Commit | Credits | Log message |
|---|---|---|---|
2869f9e034 |
Lucas Holt | net/py-urllib3: update to 2.8.0 (CVE-2026-97688) (#1659) Updates net/py-urllib3 2.7.0 → 2.8.0 to fix CVE-2026-97688 /
GHSA-gh4c-6fx4-qh6g (infinite loop in chunked Deflate streaming with
trailing bytes).
Closes #1657. The path in the Mend report
(`textproc/xml2rfc/files/patch-requirements.txt`) was removed in #171;
the actual exposure was our urllib3 port, which was in the affected
range.
- distfile sha256 matches PyPI
- build backend (hatchling/hatch-vcs/setuptools-scm) and LICENSE
unchanged
- `bmake build fake package` OK (py312)
- Upstream regression case
`test_read_chunked_with_trailing_data_does_not_hang` reproduced
standalone: hangs on 2.7.0, passes on 2.8.0 (deflate, raw deflate, gzip)
- Full `bmake test` not run: test deps py-pyopenssl and py-quart (via
py-flask) fail to install on the build box due to stale `py312-openssl`
… |
|
d31e6c7450 |
Lucas Holt | *: bump PORTREVISION for py-aiohttp and py-brotli updates (#1280) Rebuilds dependents of the two large version jumps in #1269:
`www/py-aiohttp` 3.9.3 -> 3.14.3 (#1279) and `archivers/py-brotli`
1.0.9 -> 1.2.0 (#1278).
25 ports, `PORTREVISION` lines only — no other change in the diff.
### py-aiohttp dependents (18) plus devel/py-vcrpy
`ai/py-datasets`, `ai/py-langchain-community`,
`ai/py-langchain-google-community`, `ai/py-litellm`,
`ai/py-tritonclient`,
`devel/py-aiobotocore`, `devel/py-azure-core`, `devel/py-black`,
`devel/py-gql`, `devel/py-sentry-sdk`, `devel/py-strawberry-graphql`,
`devel/py-vcrpy`, `dns/py-idna_ssl`, `filesystems/py-s3fs`,
`ftp/py-parfive`,
`mail/py-postfix-mta-sts-resolver`, `security/py-google-auth`,
`textproc/py-elasticsearch`, `www/py-google-resumable-media`
… |
|
e9c28f5ae4 |
Lucas Holt | net/py-urllib3: remove obsolete setup.cfg patch urllib3 2.7.0 uses pyproject.toml, so the setup.cfg patch fails during the patch phase.
AI-Assisted-by: OpenAI Codex <[email protected]>
Signed-off-by: Lucas Holt <[email protected]> |
|
c475656795 |
Lucas Holt | Fix test phase handling for run 641 failures Skip Magus test phase for ports that declare tests disabled, teach muon-backed meson ports to use muon test, and make Python test helpers load fake-installed modules. Also fix Python 3.12 default transition issues in py-installer and several custom port test targets.
AI-Assisted-by: OpenAI Codex <[email protected]>
Signed-off-by: Lucas Holt <[email protected]> |