Since pip is in no way critical to Gentoo, we should be able to easily unvendor all the deps.
This is a proper nightmare. Out of bundled dependencies, the following seem to be direct dependencies of pip: cachecontrol certifi colorama distlib distro html5lib packaging pep517 pkg_resources platformdirs progress requests resolvelib rich six tenacity tomli urllib3 Out of these, we need to package cachecontrol again.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b34aef88e0ead714fdde2d5192ce97f6171b9a06 commit b34aef88e0ead714fdde2d5192ce97f6171b9a06 Author: Michał Górny <mgorny@gentoo.org> AuthorDate: 2024-06-23 16:29:05 +0000 Commit: Michał Górny <mgorny@gentoo.org> CommitDate: 2024-06-23 17:32:55 +0000 dev-python/pip: Unbundle dependencies Closes: https://bugs.gentoo.org/832403 Signed-off-by: Michał Górny <mgorny@gentoo.org> dev-python/pip/files/pip-24.1-unbundle.patch | 193 +++++++++++++++++++++++++++ dev-python/pip/pip-24.1-r1.ebuild | 176 ++++++++++++++++++++++++ 2 files changed, 369 insertions(+)