Groups > linux.debian.maint.python > #13881

Re: Considering letting python-pip use vendored dependencies

From	Robert Ricardo Ikaka <ikaka.robert.online@gmail.com>
Newsgroups	linux.debian.security, linux.debian.maint.python
Subject	Re: Considering letting python-pip use vendored dependencies
Date	2022-01-16 16:20 +0100
Message-ID	<DGfu1-41m-1@gated-at.bofh.it> (permalink)
References	<CXMFs-7iS-1@gated-at.bofh.it> <DGfkl-3Wz-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

https://chng.it/jJvMChbdsJ

Support pls

вс, 16 янв. 2022 г., 18:07 <stefanor@debian.org>:

> Hi debian-security (2021.09.15_23:32:14_+0000)
> > As mentioned in debian-devel recently [1], at the DebConf 21 Debian
> > Python BoF [2] we discussed the idea of reverting our unbundling patches
> > to python-pip. The group consensus was that it wasn't worth the effort
> > to maintain these patches.
>
> FYI, this is now done, as of pip 21.3.1+dfsg-1.
>
> Updated embedded-code-copies:
>
> https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70
>
> SR
>
> --
> Stefano Rivera
>   http://tumbleweed.org.za/
>   +1 415 683 3272
>
>

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Considering letting python-pip use vendored dependencies Stefano Rivera <stefanor@debian.org> - 2021-09-16 01:50 +0200
  Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2022-01-16 16:10 +0100
    Re: Considering letting python-pip use vendored dependencies Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-16 16:20 +0100

csiph-web