pystand 2.16__tar.gz → 2.18__tar.gz

{pystand-2.16 → pystand-2.18}/Makefile

@@ -3,6 +3,7 @@ check:
 	ruff check $(PYFILES)
 	mypy $(PYFILES)
 	pyright $(PYFILES)
+	vermin -vv --no-tips -i $(PYFILES)
 	md-link-checker
 
 build:

{pystand-2.16 → pystand-2.18}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pystand
-Version: 2.16
+Version: 2.18
 Summary: Install Python versions from python-build-standalone project
 Author-email: Mark Blakeney <mark.blakeney@bullet-systems.net>
 License-Expression: GPL-3.0-or-later
@@ -12,8 +12,10 @@ Description-Content-Type: text/markdown
 Requires-Dist: argcomplete
 Requires-Dist: packaging
 Requires-Dist: platformdirs
+Requires-Dist: argparse-from-file
 Requires-Dist: pygithub
-Requires-Dist: zstandard
+Requires-Dist: certifi
+Requires-Dist: zstandard; python_version < "3.14"
 
 ## PYSTAND - Install Python Versions From The Python-Build-Standalone Project
 [![PyPi](https://img.shields.io/pypi/v/pystand)](https://pypi.org/project/pystand/)
@@ -24,14 +26,14 @@ installation, and update of pre-built Python versions from the
 [`python-build-standalone`][pbs] project. The following commands are
 provided:
 
-|Command  |Description                                                           |
-|---------|----------------------------------------------------------------------|
-|`install`|Install one or more versions from a python-build-standalone release   |
-|`update` (or `upgrade`) |Update one, more, or all versions to another release   |
-|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions          |
-|`list`   |List installed versions and show which have an update available       |
-|`show`   |Show versions available from a release                                |
-|`path`   |Show path prefix to installed version base directory                  |
+|Command  |Description                                                         |
+|---------|--------------------------------------------------------------------|
+|`install`|Install one or more versions from a python-build-standalone release.|
+|`update` (or `upgrade`) |Update one, more, or all versions to another release.|
+|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions.|
+|`list`   |List installed versions and show which have an update available.|
+|`show`   |Show versions available from a release.|
+|`path`   |Show path prefix to installed version base directory.|
 
 By default, Python versions are sourced from the latest
 `python-build-standalone` [release][pbs-rel] available (e.g.
@@ -130,7 +132,7 @@ Type `pystand` or `pystand -h` to view the usage summary:
 usage: pystand [-h] [-D DISTRIBUTION] [-P PREFIX_DIR] [-C CACHE_DIR]
                   [-M CACHE_MINUTES] [--purge-days PURGE_DAYS]
                   [--github-access-token GITHUB_ACCESS_TOKEN] [--no-strip]
-                  [-V]
+                  [--cert {system,certifi,none}] [-V]
                   {install,update,upgrade,remove,uninstall,list,show,path,cache} ...
 
 Command line tool to download, install, and update pre-built Python versions
@@ -146,22 +148,25 @@ options:
                         distributions.
   -P, --prefix-dir PREFIX_DIR
                         specify prefix dir for storing versions. Default is
-                        "$HOME/.local/share/pystand"
+                        "$HOME/.local/share/pystand".
   -C, --cache-dir CACHE_DIR
                         specify cache dir for downloads. Default is
-                        "$HOME/.cache/pystand"
+                        "$HOME/.cache/pystand".
   -M, --cache-minutes CACHE_MINUTES
                         cache latest YYYYMMDD release tag fetch for this many
                         minutes, before rechecking for latest. Default is 60
-                        minutes
+                        minutes.
   --purge-days PURGE_DAYS
                         cache YYYYMMDD release file lists and downloads for
                         this number of days after last version referencing
-                        that release is removed. Default is 90 days
+                        that release is removed. Default is 90 days.
   --github-access-token GITHUB_ACCESS_TOKEN
                         optional Github access token. Can specify to reduce
                         rate limiting.
   --no-strip            do not strip downloaded binaries
+  --cert {system,certifi,none}
+                        specify which SSL certificates to use for HTTPS
+                        requests. Default="system".
   -V, --version         just show pystand version
 
 Commands:
@@ -562,9 +567,8 @@ anything after on a line) are ignored. Type `pystand` to see all
 supported options.
 
 The global options: `--distribution`, `--prefix-dir`, `--cache-dir`,
-`--cache-minutes`, `--purge-days`, `--github-access-token`,
-`--no-strip`, are the only sensible candidates to consider setting
-as defaults.
+`--cache-minutes`, `--purge-days`, `--github-access-token`, `--no-strip`,
+`--cert` are the only sensible candidates to consider setting as defaults.
 
 ## Github API Rate Limiting
 
@@ -579,6 +583,24 @@ either a Github "fine-grained" or "classic" token. Specify the token on
 the command line with `--github-access-token`, or set that as a [default
 option](#command-default-options).
 
+## HTTPS Certificate Verification
+
+A global option `--cert` is provided to specify which SSL certificates to use
+for HTTPS requests. This is useful if you are running `pystand` in an
+environment where the system certificates are not available, or you want to use
+the bundled [`certifi`][certifi] certificates instead.
+
+The available options are:
+
+|Option   |Description
+|-------- |------------
+|`system` |Use system certificates (as used normally by Python). This is the default.|
+|`certifi`|Use the [`certifi`][certifi] package, i.e. use the certificates bundled within the application.|
+|`none`   |Perform unverified https requests (best to avoid using this).|
+
+Specify the option on the command line with `--cert`, or set that as a [default
+option](#command-default-options).
+
 ## Command Line Tab Completion
 
 Command line shell [tab
@@ -598,7 +620,7 @@ either version 3 of the License, or any later version. This program is
 distributed in the hope that it will be useful, but WITHOUT ANY
 WARRANTY; without even the implied warranty of MERCHANTABILITY or
 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
-<http://www.gnu.org/licenses/> for more details.
+<https://opensource.org/license/gpl-3-0> for more details.
 
 [pystand]: https://github.com/bulletmark/pystand
 [pbs]: https://github.com/astral-sh/python-build-standalone
@@ -612,5 +634,6 @@ FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
 [hatch]: https://hatch.pypa.io/
 [hatchpy]: https://hatch.pypa.io/latest/tutorials/python/manage/
 [ryepy]: https://rye.astral.sh/guide/toolchains/#fetching-toolchains
+[certifi]: https://pypi.org/project/certifi/
 
 <!-- vim: se ai syn=markdown: -->

pystand-2.16/pystand.egg-info/PKG-INFO → pystand-2.18/README.md

@@ -1,20 +1,3 @@
-Metadata-Version: 2.4
-Name: pystand
-Version: 2.16
-Summary: Install Python versions from python-build-standalone project
-Author-email: Mark Blakeney <mark.blakeney@bullet-systems.net>
-License-Expression: GPL-3.0-or-later
-Project-URL: Homepage, https://github.com/bulletmark/pystand
-Keywords: python-build-standalone,pyenv,hatch,pdm
-Classifier: Programming Language :: Python :: 3
-Requires-Python: >=3.8
-Description-Content-Type: text/markdown
-Requires-Dist: argcomplete
-Requires-Dist: packaging
-Requires-Dist: platformdirs
-Requires-Dist: pygithub
-Requires-Dist: zstandard
-
 ## PYSTAND - Install Python Versions From The Python-Build-Standalone Project
 [![PyPi](https://img.shields.io/pypi/v/pystand)](https://pypi.org/project/pystand/)
 [![AUR](https://img.shields.io/aur/version/pystand)](https://aur.archlinux.org/packages/pystand/)
@@ -24,14 +7,14 @@ installation, and update of pre-built Python versions from the
 [`python-build-standalone`][pbs] project. The following commands are
 provided:
 
-|Command  |Description                                                           |
-|---------|----------------------------------------------------------------------|
-|`install`|Install one or more versions from a python-build-standalone release   |
-|`update` (or `upgrade`) |Update one, more, or all versions to another release   |
-|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions          |
-|`list`   |List installed versions and show which have an update available       |
-|`show`   |Show versions available from a release                                |
-|`path`   |Show path prefix to installed version base directory                  |
+|Command  |Description                                                         |
+|---------|--------------------------------------------------------------------|
+|`install`|Install one or more versions from a python-build-standalone release.|
+|`update` (or `upgrade`) |Update one, more, or all versions to another release.|
+|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions.|
+|`list`   |List installed versions and show which have an update available.|
+|`show`   |Show versions available from a release.|
+|`path`   |Show path prefix to installed version base directory.|
 
 By default, Python versions are sourced from the latest
 `python-build-standalone` [release][pbs-rel] available (e.g.
@@ -130,7 +113,7 @@ Type `pystand` or `pystand -h` to view the usage summary:
 usage: pystand [-h] [-D DISTRIBUTION] [-P PREFIX_DIR] [-C CACHE_DIR]
                   [-M CACHE_MINUTES] [--purge-days PURGE_DAYS]
                   [--github-access-token GITHUB_ACCESS_TOKEN] [--no-strip]
-                  [-V]
+                  [--cert {system,certifi,none}] [-V]
                   {install,update,upgrade,remove,uninstall,list,show,path,cache} ...
 
 Command line tool to download, install, and update pre-built Python versions
@@ -146,22 +129,25 @@ options:
                         distributions.
   -P, --prefix-dir PREFIX_DIR
                         specify prefix dir for storing versions. Default is
-                        "$HOME/.local/share/pystand"
+                        "$HOME/.local/share/pystand".
   -C, --cache-dir CACHE_DIR
                         specify cache dir for downloads. Default is
-                        "$HOME/.cache/pystand"
+                        "$HOME/.cache/pystand".
   -M, --cache-minutes CACHE_MINUTES
                         cache latest YYYYMMDD release tag fetch for this many
                         minutes, before rechecking for latest. Default is 60
-                        minutes
+                        minutes.
   --purge-days PURGE_DAYS
                         cache YYYYMMDD release file lists and downloads for
                         this number of days after last version referencing
-                        that release is removed. Default is 90 days
+                        that release is removed. Default is 90 days.
   --github-access-token GITHUB_ACCESS_TOKEN
                         optional Github access token. Can specify to reduce
                         rate limiting.
   --no-strip            do not strip downloaded binaries
+  --cert {system,certifi,none}
+                        specify which SSL certificates to use for HTTPS
+                        requests. Default="system".
   -V, --version         just show pystand version
 
 Commands:
@@ -562,9 +548,8 @@ anything after on a line) are ignored. Type `pystand` to see all
 supported options.
 
 The global options: `--distribution`, `--prefix-dir`, `--cache-dir`,
-`--cache-minutes`, `--purge-days`, `--github-access-token`,
-`--no-strip`, are the only sensible candidates to consider setting
-as defaults.
+`--cache-minutes`, `--purge-days`, `--github-access-token`, `--no-strip`,
+`--cert` are the only sensible candidates to consider setting as defaults.
 
 ## Github API Rate Limiting
 
@@ -579,6 +564,24 @@ either a Github "fine-grained" or "classic" token. Specify the token on
 the command line with `--github-access-token`, or set that as a [default
 option](#command-default-options).
 
+## HTTPS Certificate Verification
+
+A global option `--cert` is provided to specify which SSL certificates to use
+for HTTPS requests. This is useful if you are running `pystand` in an
+environment where the system certificates are not available, or you want to use
+the bundled [`certifi`][certifi] certificates instead.
+
+The available options are:
+
+|Option   |Description
+|-------- |------------
+|`system` |Use system certificates (as used normally by Python). This is the default.|
+|`certifi`|Use the [`certifi`][certifi] package, i.e. use the certificates bundled within the application.|
+|`none`   |Perform unverified https requests (best to avoid using this).|
+
+Specify the option on the command line with `--cert`, or set that as a [default
+option](#command-default-options).
+
 ## Command Line Tab Completion
 
 Command line shell [tab
@@ -598,7 +601,7 @@ either version 3 of the License, or any later version. This program is
 distributed in the hope that it will be useful, but WITHOUT ANY
 WARRANTY; without even the implied warranty of MERCHANTABILITY or
 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
-<http://www.gnu.org/licenses/> for more details.
+<https://opensource.org/license/gpl-3-0> for more details.
 
 [pystand]: https://github.com/bulletmark/pystand
 [pbs]: https://github.com/astral-sh/python-build-standalone
@@ -612,5 +615,6 @@ FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
 [hatch]: https://hatch.pypa.io/
 [hatchpy]: https://hatch.pypa.io/latest/tutorials/python/manage/
 [ryepy]: https://rye.astral.sh/guide/toolchains/#fetching-toolchains
+[certifi]: https://pypi.org/project/certifi/
 
 <!-- vim: se ai syn=markdown: -->

{pystand-2.16 → pystand-2.18}/pyproject.toml

@@ -17,8 +17,10 @@ dependencies = [
   "argcomplete",
   "packaging",
   "platformdirs",
+  "argparse-from-file",
   "pygithub",
-  "zstandard",
+  "certifi",
+  "zstandard; python_version < '3.14'",
 ]
 
 [[project.authors]]

pystand-2.16/README.md → pystand-2.18/pystand.egg-info/PKG-INFO

@@ -1,3 +1,22 @@
+Metadata-Version: 2.4
+Name: pystand
+Version: 2.18
+Summary: Install Python versions from python-build-standalone project
+Author-email: Mark Blakeney <mark.blakeney@bullet-systems.net>
+License-Expression: GPL-3.0-or-later
+Project-URL: Homepage, https://github.com/bulletmark/pystand
+Keywords: python-build-standalone,pyenv,hatch,pdm
+Classifier: Programming Language :: Python :: 3
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: argcomplete
+Requires-Dist: packaging
+Requires-Dist: platformdirs
+Requires-Dist: argparse-from-file
+Requires-Dist: pygithub
+Requires-Dist: certifi
+Requires-Dist: zstandard; python_version < "3.14"
+
 ## PYSTAND - Install Python Versions From The Python-Build-Standalone Project
 [![PyPi](https://img.shields.io/pypi/v/pystand)](https://pypi.org/project/pystand/)
 [![AUR](https://img.shields.io/aur/version/pystand)](https://aur.archlinux.org/packages/pystand/)
@@ -7,14 +26,14 @@ installation, and update of pre-built Python versions from the
 [`python-build-standalone`][pbs] project. The following commands are
 provided:
 
-|Command  |Description                                                           |
-|---------|----------------------------------------------------------------------|
-|`install`|Install one or more versions from a python-build-standalone release   |
-|`update` (or `upgrade`) |Update one, more, or all versions to another release   |
-|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions          |
-|`list`   |List installed versions and show which have an update available       |
-|`show`   |Show versions available from a release                                |
-|`path`   |Show path prefix to installed version base directory                  |
+|Command  |Description                                                         |
+|---------|--------------------------------------------------------------------|
+|`install`|Install one or more versions from a python-build-standalone release.|
+|`update` (or `upgrade`) |Update one, more, or all versions to another release.|
+|`remove` (or `uninstall`) |Remove/uninstall one, more, or all versions.|
+|`list`   |List installed versions and show which have an update available.|
+|`show`   |Show versions available from a release.|
+|`path`   |Show path prefix to installed version base directory.|
 
 By default, Python versions are sourced from the latest
 `python-build-standalone` [release][pbs-rel] available (e.g.
@@ -113,7 +132,7 @@ Type `pystand` or `pystand -h` to view the usage summary:
 usage: pystand [-h] [-D DISTRIBUTION] [-P PREFIX_DIR] [-C CACHE_DIR]
                   [-M CACHE_MINUTES] [--purge-days PURGE_DAYS]
                   [--github-access-token GITHUB_ACCESS_TOKEN] [--no-strip]
-                  [-V]
+                  [--cert {system,certifi,none}] [-V]
                   {install,update,upgrade,remove,uninstall,list,show,path,cache} ...
 
 Command line tool to download, install, and update pre-built Python versions
@@ -129,22 +148,25 @@ options:
                         distributions.
   -P, --prefix-dir PREFIX_DIR
                         specify prefix dir for storing versions. Default is
-                        "$HOME/.local/share/pystand"
+                        "$HOME/.local/share/pystand".
   -C, --cache-dir CACHE_DIR
                         specify cache dir for downloads. Default is
-                        "$HOME/.cache/pystand"
+                        "$HOME/.cache/pystand".
   -M, --cache-minutes CACHE_MINUTES
                         cache latest YYYYMMDD release tag fetch for this many
                         minutes, before rechecking for latest. Default is 60
-                        minutes
+                        minutes.
   --purge-days PURGE_DAYS
                         cache YYYYMMDD release file lists and downloads for
                         this number of days after last version referencing
-                        that release is removed. Default is 90 days
+                        that release is removed. Default is 90 days.
   --github-access-token GITHUB_ACCESS_TOKEN
                         optional Github access token. Can specify to reduce
                         rate limiting.
   --no-strip            do not strip downloaded binaries
+  --cert {system,certifi,none}
+                        specify which SSL certificates to use for HTTPS
+                        requests. Default="system".
   -V, --version         just show pystand version
 
 Commands:
@@ -545,9 +567,8 @@ anything after on a line) are ignored. Type `pystand` to see all
 supported options.
 
 The global options: `--distribution`, `--prefix-dir`, `--cache-dir`,
-`--cache-minutes`, `--purge-days`, `--github-access-token`,
-`--no-strip`, are the only sensible candidates to consider setting
-as defaults.
+`--cache-minutes`, `--purge-days`, `--github-access-token`, `--no-strip`,
+`--cert` are the only sensible candidates to consider setting as defaults.
 
 ## Github API Rate Limiting
 
@@ -562,6 +583,24 @@ either a Github "fine-grained" or "classic" token. Specify the token on
 the command line with `--github-access-token`, or set that as a [default
 option](#command-default-options).
 
+## HTTPS Certificate Verification
+
+A global option `--cert` is provided to specify which SSL certificates to use
+for HTTPS requests. This is useful if you are running `pystand` in an
+environment where the system certificates are not available, or you want to use
+the bundled [`certifi`][certifi] certificates instead.
+
+The available options are:
+
+|Option   |Description
+|-------- |------------
+|`system` |Use system certificates (as used normally by Python). This is the default.|
+|`certifi`|Use the [`certifi`][certifi] package, i.e. use the certificates bundled within the application.|
+|`none`   |Perform unverified https requests (best to avoid using this).|
+
+Specify the option on the command line with `--cert`, or set that as a [default
+option](#command-default-options).
+
 ## Command Line Tab Completion
 
 Command line shell [tab
@@ -581,7 +620,7 @@ either version 3 of the License, or any later version. This program is
 distributed in the hope that it will be useful, but WITHOUT ANY
 WARRANTY; without even the implied warranty of MERCHANTABILITY or
 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
-<http://www.gnu.org/licenses/> for more details.
+<https://opensource.org/license/gpl-3-0> for more details.
 
 [pystand]: https://github.com/bulletmark/pystand
 [pbs]: https://github.com/astral-sh/python-build-standalone
@@ -595,5 +634,6 @@ FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License at
 [hatch]: https://hatch.pypa.io/
 [hatchpy]: https://hatch.pypa.io/latest/tutorials/python/manage/
 [ryepy]: https://rye.astral.sh/guide/toolchains/#fetching-toolchains
+[certifi]: https://pypi.org/project/certifi/
 
 <!-- vim: se ai syn=markdown: -->

pystand-2.18/pystand.egg-info/requires.txt

@@ -0,0 +1,9 @@
+argcomplete
+packaging
+platformdirs
+argparse-from-file
+pygithub
+certifi
+
+[:python_version < "3.14"]
+zstandard

{pystand-2.16 → pystand-2.18}/pystand.py

@@ -11,18 +11,20 @@ from __future__ import annotations
 import os
 import platform
 import re
-import shlex
 import shutil
+import ssl
 import sys
 import time
-from argparse import ArgumentParser, Namespace
 from collections import defaultdict
+from collections.abc import Iterable, Iterator
 from datetime import date, datetime
 from pathlib import Path
-from typing import Any, Iterable, Iterator
+from typing import Any
+from urllib.request import urlopen
 
 import argcomplete
 import platformdirs
+from argparse_from_file import ArgumentParser, Namespace  # type: ignore
 from packaging.version import parse as parse_version
 
 REPO = 'python-build-standalone'
@@ -35,7 +37,6 @@ LATEST_RELEASE_TAG = f'{GITHUB_SITE}/releases/latest'
 SAMPL_RELEASE = '20240415'
 
 PROG = Path(__file__).stem
-CNFFILE = platformdirs.user_config_path(f'{PROG}-flags.conf')
 
 # Default distributions for various platforms
 DISTRIBUTIONS = {
@@ -45,10 +46,13 @@ DISTRIBUTIONS = {
     ('Linux', 'armv8l'): 'armv7-unknown-linux-gnueabihf-install_only_stripped',
     ('Darwin', 'x86_64'): 'x86_64-apple-darwin-install_only_stripped',
     ('Darwin', 'aarch64'): 'aarch64-apple-darwin-install_only_stripped',
+    ('Darwin', 'arm64'): 'aarch64-apple-darwin-install_only_stripped',
     ('Windows', 'x86_64'): 'x86_64-pc-windows-msvc-shared-install_only_stripped',
     ('Windows', 'i686'): 'i686-pc-windows-msvc-shared-install_only_stripped',
 }
 
+CERTS = ('system', 'certifi', 'none')
+
 
 def is_admin() -> bool:
     "Check if we are running as root"
@@ -77,7 +81,7 @@ def fmt(version, release) -> str:
     return f'{version} @ {release}'
 
 
-def get_json(file: Path) -> dict:
+def get_json(file: Path) -> dict[str, Any]:
     from json import load
 
     'Get JSON data from given file'
@@ -90,7 +94,7 @@ def get_json(file: Path) -> dict:
     return {}
 
 
-def set_json(file: Path, data: dict) -> str | None:
+def set_json(file: Path, data: dict[str, Any]) -> str | None:
     "Set JSON data to given file"
     from json import dump
 
@@ -138,23 +142,30 @@ def rm_path(path: Path) -> None:
         path.unlink()
 
 
-def unpack_zst(filename: str, extract_dir: str) -> None:
-    "Unpack a zstandard compressed tar"
-    import tarfile
+def register_zst() -> None:
+    "Register custom zstandard unpacker"
+    # Python 3.14+ has built-in support for zstandard so only register custom
+    # handler for earlier versions
+    if sys.version_info < (3, 14):
+
+        def unpack_zst(filename: str, extract_dir: str) -> None:
+            "Unpack a zstandard compressed tar"
+            import tarfile
 
-    import zstandard
+            import zstandard
 
-    with open(filename, 'rb') as compressed:
-        dctx = zstandard.ZstdDecompressor()
-        with dctx.stream_reader(compressed) as reader:
-            with tarfile.open(fileobj=reader, mode='r|') as tar:
-                tar.extractall(path=extract_dir)
+            with open(filename, 'rb') as compressed:
+                dctx = zstandard.ZstdDecompressor()
+                with dctx.stream_reader(compressed) as reader:
+                    with tarfile.open(fileobj=reader, mode='r|') as tar:
+                        tar.extractall(path=extract_dir)
+
+        shutil.register_unpack_format('zst', ['.zst'], unpack_zst)
 
 
 def fetch(args: Namespace, release: str, url: str, tdir: Path) -> str | None:
     "Fetch and unpack a release file"
     from urllib.parse import unquote, urlparse
-    from urllib.request import urlretrieve
 
     error = None
     tmpdir = tdir.with_name(f'{tdir.name}-tmp')
@@ -168,7 +179,8 @@ def fetch(args: Namespace, release: str, url: str, tdir: Path) -> str | None:
 
     if not cache_file.exists():
         try:
-            urlretrieve(url, cache_file)
+            with urlopen(url, context=args._cert) as urlp, cache_file.open('wb') as fp:
+                shutil.copyfileobj(urlp, fp)
         except Exception as e:
             error = f'Failed to fetch "{url}": {e}'
 
@@ -176,7 +188,7 @@ def fetch(args: Namespace, release: str, url: str, tdir: Path) -> str | None:
         rm_path(cache_file)
     else:
         if filename.endswith('.zst'):
-            shutil.register_unpack_format('zst', ['.zst'], unpack_zst)
+            register_zst()
 
         try:
             shutil.unpack_archive(cache_file, tmpdir)
@@ -306,13 +318,12 @@ def check_release_tag(release: str) -> str | None:
 # Note we use a simple direct URL fetch to get the latest tag info
 # because it is much faster than using the GitHub API, and has no
 # rate-limits.
-def fetch_tags() -> Iterator[tuple[str, str]]:
+def fetch_tags(args: Namespace) -> Iterator[tuple[str, str]]:
     "Fetch the latest release tags from the GitHub release atom feed"
     import xml.etree.ElementTree as et
-    from urllib.request import urlopen
 
     try:
-        with urlopen(LATEST_RELEASES) as url:
+        with urlopen(LATEST_RELEASES, context=args._cert) as url:
             data = et.parse(url).getroot()
     except Exception:
         sys.exit('Failed to fetch latest YYYYMMDD release atom file.')
@@ -325,12 +336,10 @@ def fetch_tags() -> Iterator[tuple[str, str]]:
                 yield tl, dt
 
 
-def fetch_tag_latest() -> str:
+def fetch_tag_latest(args: Namespace) -> str:
     "Fetch the latest release tag from the GitHub"
-    from urllib.request import urlopen
-
     try:
-        with urlopen(LATEST_RELEASE_TAG) as url:
+        with urlopen(LATEST_RELEASE_TAG, context=args._cert) as url:
             data = url.geturl()
     except Exception:
         sys.exit('Failed to fetch latest YYYYMMDD release tag.')
@@ -351,14 +360,14 @@ def get_release_tag(args: Namespace) -> str:
         if time.time() < (stat.st_mtime + int(args.cache_minutes * 60)):
             return args._latest_release.read_text().strip()
 
-    if not (tag := fetch_tag_latest()):
+    if not (tag := fetch_tag_latest(args)):
         sys.exit('Latest YYYYMMDD release tag timestamp file is unavailable.')
 
     args._latest_release.write_text(tag + '\n')
     return tag
 
 
-def add_file(files: dict, tag: str, name: str, url: str) -> None:
+def add_file(files: dict[str, Any], tag: str, name: str, url: str) -> None:
     "Extract the implementation, version, and architecture from a filename"
     if name.endswith('.tar.zst'):
         name = name[:-8]
@@ -386,7 +395,7 @@ def add_file(files: dict, tag: str, name: str, url: str) -> None:
     vers[ver][arch] = url
 
 
-def get_release_files(args, tag, implementation: str | None = None) -> dict:
+def get_release_files(args, tag) -> dict[str, Any]:
     "Return the release files for the given tag"
     # Look for tag data in our release cache
     jfile = args._releases / tag
@@ -414,7 +423,7 @@ def get_release_files(args, tag, implementation: str | None = None) -> dict:
         if error := set_json(jfile, files):
             sys.exit(f'Failed to write release {tag} file {jfile}: {error}')
 
-    return files.get(implementation, {}) if implementation else files
+    return files.get(args._implementation, {})
 
 
 def update_version_symlinks(args: Namespace) -> None:
@@ -499,7 +508,7 @@ def purge_unused_releases(args: Namespace) -> None:
 def show_list(args: Namespace) -> None:
     "Show a list of available releases"
     latest = parse_version(get_release_tag(args))
-    releases = {r: d for r, d in fetch_tags()}
+    releases = {r: d for r, d in fetch_tags(args)}
     cached = set(p.name for p in args._releases.iterdir())
     for release in sorted(cached.union(releases)):
         if args.re_match and not re.search(args.re_match, release):
@@ -578,7 +587,7 @@ def strip_binaries(vdir: Path, distribution: str) -> bool:
 
 
 def install(
-    args: Namespace, vdir: Path, release: str, distribution: str, files: dict
+    args: Namespace, vdir: Path, release: str, distribution: str, files: dict[str, Any]
 ) -> str | None:
     "Install a version"
     version = vdir.name
@@ -640,6 +649,21 @@ def show_cache_size(path: Path, args: Namespace) -> None:
         print(f'{size_str}\tTOTAL')
 
 
+def create_cert(option: str) -> ssl.SSLContext | None:
+    "Create an SSL context for HTTPS connections based on the specified certificate store"
+
+    if not option or option == 'system':
+        return None
+
+    if option == 'certifi':
+        import certifi
+
+        return ssl.create_default_context(cafile=certifi.where())
+
+    assert option == 'none'
+    return ssl._create_unverified_context()
+
+
 def main() -> str | None:
     "Main code"
     distro_default = DISTRIBUTIONS.get((platform.system(), platform.machine()))
@@ -653,8 +677,7 @@ def main() -> str | None:
     opt = ArgumentParser(
         description=__doc__,
         epilog='Some commands offer aliases as shown in parentheses above. '
-        'Note you can set default starting global options in '
-        f'{CNFFILE}.',
+        'Note you can set default starting global options in #FROM_FILE_PATH#',
     )
 
     # Set up main/global arguments
@@ -668,13 +691,13 @@ def main() -> str | None:
         '-P',
         '--prefix-dir',
         default=prefix_dir,
-        help='specify prefix dir for storing versions. Default is "%(default)s"',
+        help='specify prefix dir for storing versions. Default is "%(default)s".',
     )
     opt.add_argument(
         '-C',
         '--cache-dir',
         default=str(cache_dir),
-        help='specify cache dir for downloads. Default is "%(default)s"',
+        help='specify cache dir for downloads. Default is "%(default)s".',
     )
     opt.add_argument(
         '-M',
@@ -683,7 +706,7 @@ def main() -> str | None:
         type=float,
         help='cache latest YYYYMMDD release tag fetch for this '
         'many minutes, before rechecking for latest. '
-        'Default is %(default)d minutes',
+        'Default is %(default)d minutes.',
     )
     opt.add_argument(
         '--purge-days',
@@ -691,7 +714,7 @@ def main() -> str | None:
         type=int,
         help='cache YYYYMMDD release file lists and downloads for '
         'this number of days after last version referencing that '
-        'release is removed. Default is %(default)d days',
+        'release is removed. Default is %(default)d days.',
     )
     opt.add_argument(
         '--github-access-token',
@@ -700,6 +723,11 @@ def main() -> str | None:
     opt.add_argument(
         '--no-strip', action='store_true', help='do not strip downloaded binaries'
     )
+    opt.add_argument(
+        '--cert',
+        choices=CERTS,
+        help=f'specify which SSL certificates to use for HTTPS requests. Default="{CERTS[0]}".',
+    )
     opt.add_argument(
         '-V', '--version', action='store_true', help=f'just show {PROG} version'
     )
@@ -733,18 +761,7 @@ def main() -> str | None:
 
     # Command arguments are now defined, so we can set up argcomplete
     argcomplete.autocomplete(opt)
-
-    # Merge in default args from user config file. Then parse the
-    # command line.
-    cnffile = CNFFILE.expanduser()
-    if cnffile.is_file():
-        with cnffile.open() as fp:
-            lines = [re.sub(r'#.*$', '', line).strip() for line in fp]
-        cnflines = ' '.join(lines).strip()
-    else:
-        cnflines = ''
-
-    args = opt.parse_args(shlex.split(cnflines) + sys.argv[1:])
+    args = opt.parse_args()
 
     if 'func' not in args:
         if args.version:
@@ -765,6 +782,7 @@ def main() -> str | None:
     prefix_dir = Path(args.prefix_dir).expanduser().resolve()
     cache_dir = Path(args.cache_dir).expanduser().resolve()
 
+    args._implementation = 'cpython'  # at the moment, only support CPython
     args._distribution = distribution
     args._data = f'{PROG}.json'
 
@@ -776,6 +794,7 @@ def main() -> str | None:
     args._releases = cache_dir / 'releases'
     args._releases.mkdir(parents=True, exist_ok=True)
     args._latest_release = cache_dir / 'latest_release'
+    args._cert = create_cert(args.cert)
 
     result = args.func(args)
     purge_unused_releases(args)
@@ -815,7 +834,7 @@ class install_:
     @staticmethod
     def run(args: Namespace) -> str | None:
         release = get_release_tag(args)
-        files = get_release_files(args, release, 'cpython')
+        files = get_release_files(args, release)
         if not files:
             return f'Release "{release}" not found, or has no compatible files.'
 
@@ -874,7 +893,7 @@ class update_:
     @staticmethod
     def run(args: Namespace) -> str | None:
         release_target = get_release_tag(args)
-        files = get_release_files(args, release_target, 'cpython')
+        files = get_release_files(args, release_target)
         if not files:
             return f'Release "{release_target}" not found.'
 
@@ -991,7 +1010,7 @@ class list_:
     @staticmethod
     def run(args: Namespace) -> str | None:
         release_target = get_release_tag(args)
-        files = get_release_files(args, release_target, 'cpython')
+        files = get_release_files(args, release_target)
         if not files:
             return f'Release "{release_target}" not found.'
 
@@ -1089,7 +1108,7 @@ class show_:
             return None
 
         release = get_release_tag(args)
-        files = get_release_files(args, release, 'cpython')
+        files = get_release_files(args, release)
         if not files:
             return f'Error: release "{release}" not found.'
 

pystand-2.16/pystand.egg-info/requires.txt

@@ -1,5 +0,0 @@
-argcomplete
-packaging
-platformdirs
-pygithub
-zstandard