On 2025/05/14 21:34, Daniel Dickman wrote:
> I plan to commit an update to bleach soon since tinycss2 was updated to 
> 1.4.0 which the current version of bleach doesn't support.
> 
> This version mismatch is now a blocker for updating jupyter notebook.
> 
> Note that bleach is EOL upstream so we likely won't see any more updates 
> and therefore I added an upper bound on tinycss2<1.5 in this port.
> 
> There are only 2 consumers of bleach in the tree: synapse and nbconvert. 
> Both build following the bleach update although I'm not familiar with 
> synapse and how to use it.

synapse's poetry.lock has bleach 6.2.0 so they should be happy
with it.

> Any oks on the update below?
> 
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/www/py-bleach/Makefile,v
> diff -u -p -u -r1.19 Makefile
> --- Makefile	29 Apr 2025 10:40:29 -0000	1.19
> +++ Makefile	15 May 2025 01:29:16 -0000
> @@ -1,9 +1,9 @@
>  COMMENT =		easy whitelist-based HTML-sanitizing tool
>  
> -MODPY_DISTV =	5.0.1
> +# bleach is discontinued upstream

could you change the comment please - it's deprecated, but not
discontinued. https://github.com/mozilla/bleach/issues/698

otherwise ok