fw_update: Make tar skip files outside expected locations
tar(1) strips ".." path components, but this happens after globbing is
applied to the file parameter. This meant tar's -s replacements and the
file parameter examined different strings, meaning a specially
constructed archive could write outside the expected locations. Use
tar's documented order of -s expressions to skip everything else.
Update to 2026dgtz from https://github.com/JodaOrg/global-tz
o Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
o Obsolescent settings like TZ="EST5EDT" now conform better to POSIX.
o Colombia’s 1992-05-02 spring forward was at 00:00, not 24:00.
o Iran’s 1979-05-26 spring forward was at 00:00, not 24:00.
www/py-pytest-flask: new port (version 1.3.0)
An extension of pytest test runner which provides a set of useful tools
to simplify testing and development of the Flask extensions and
applications.
OK: kn@, sthen@
devel/py-pytest-factoryboy: new port (version 2.8.1)
pytest-factoryboy makes it easy to combine factory approach to the test
setup with the dependency injection, heart of the pytest fixtures.
OK: kn@, sthen@
devel/py-faker: new port (version 40.38.0)
Faker is a Python package that generates fake data for you. Whether you
need to bootstrap your database, create good-looking XML documents,
fill-in your persistence to stress test it, or anonymize data taken from
a production service, Faker is for you.
Faker is heavily inspired by PHP Faker, Perl Faker, and by Ruby Faker.
OK: kn@, sthen@
textproc/py-titlecase: new port (version 2.4.1)
Python library to capitalize strings as specified by the New York Times
Manual of Style.
This filter changes a given text to Title Caps, and attempts to be
clever about SMALL words like a/an/the in the input. The list of "SMALL
words" which are not capped comes from the New York Times Manual of
Style, plus some others like 'vs' and 'v'.
The filter employs some heuristics to guess abbreviations that don't
need conversion.
OK: kn@, sthen@