From: Stuart Henderson <stu@spacehopper.org>
Subject: Re: UPDATE security/plaso and it's myriad of dependencies, and take MAINTAINER
To: Sebastian Reitenbach <sebastia@l00-bugdead-prods.de>
Cc: ports <ports@openbsd.org>, rpointel@openbsd.org
Date: Wed, 25 Feb 2026 12:49:28 +0000

On 2026/02/24 20:50, Sebastian Reitenbach wrote:
> Updating plaso to latest, will add 14 new dependencies, those are in new_plaso_deps.tar.gz.
> Especially all those libXXXX dependencies are from github/libyal, similar to the majority of
> the existing dependencies. Therefore they follow the same scheme.

it would be really nice to collect these under a common dir
(e.g. maybe sysutils/libyal) rather than have them scattered
across the tree.

do you think you could do that for the new ones please?
(once they're in we could move the existing ones too)

> They all have a problem with 'make test', python module loading
> fails.  But that seem to be systematic problem for all of them, and
> not new, as it was with the same with the existing libyal ports, and
> their updates.

will try to have a look at that.

> Then there are a 3 new py-* dependencies.

updated versions attached in py-deps.tgz.

of those, devel/py-flor and devel/py-acstore are ok (I moved them to
GH_* so that tests work, linewrapped DESCR in acstore, maybe some other
small tweak).

textproc/py-opensearch-py, I enabled tests, which shows that it doesn't
work yet, some deps are missing:

install_requires = [
    'urllib3>=1.26.19,<1.27 ; python_version < "3.10"',
    'urllib3>=1.26.19,!=2.2.0,!=2.2.1,<3 ; python_version >= "3.10"',
    "requests>=2.32.0, <3.0.0",
    "python-dateutil",
    "certifi>=2024.07.04",
    "Events",
    # License: Apache 2.0
    # gRPC transport client libraries
    "opensearch-protobufs==0.19.0",
]

so for the ones already in ports ..

RUN_DEPENDS =	devel/py-certifi \
		devel/py-dateutil \
		www/py-requests \
		www/py-urllib3

then new ports will be needed for

https://pypi.org/project/Events/
https://pypi.org/project/opensearch-protobufs/ (this is likely to
be tricky; there's no .tar.gz on pypi, and upstream's tree builds
using bazel)
https://pypi.org/project/grpcio/ (required by opensearch-protobufs)