Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 832403 - dev-python/pip: unbundle dependencies
Summary: dev-python/pip: unbundle dependencies
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Python Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2022-01-31 00:28 UTC by Michał Górny
Modified: 2024-07-29 14:41 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-01-31 00:28:33 UTC
Since pip is in no way critical to Gentoo, we should be able to easily unvendor all the deps.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-01-31 09:01:38 UTC
This is a proper nightmare.  Out of bundled dependencies, the following seem to be direct dependencies of pip:

cachecontrol
certifi
colorama
distlib
distro
html5lib
packaging
pep517
pkg_resources
platformdirs
progress
requests
resolvelib
rich
six
tenacity
tomli
urllib3


Out of these, we need to package cachecontrol again.
Comment 2 Larry the Git Cow gentoo-dev 2024-06-23 17:33:02 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b34aef88e0ead714fdde2d5192ce97f6171b9a06

commit b34aef88e0ead714fdde2d5192ce97f6171b9a06
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2024-06-23 16:29:05 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2024-06-23 17:32:55 +0000

    dev-python/pip: Unbundle dependencies
    
    Closes: https://bugs.gentoo.org/832403
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 dev-python/pip/files/pip-24.1-unbundle.patch | 193 +++++++++++++++++++++++++++
 dev-python/pip/pip-24.1-r1.ebuild            | 176 ++++++++++++++++++++++++
 2 files changed, 369 insertions(+)