Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5996

Re: Considering letting python-pip use vendored dependencies

From stefanor@debian.org
Newsgroups linux.debian.security, linux.debian.maint.python
Subject Re: Considering letting python-pip use vendored dependencies
Date 2022-01-16 16:10 +0100
Message-ID <DGfkl-3Wz-5@gated-at.bofh.it> (permalink)
References <CXMFs-7iS-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


Hi debian-security (2021.09.15_23:32:14_+0000)
> As mentioned in debian-devel recently [1], at the DebConf 21 Debian
> Python BoF [2] we discussed the idea of reverting our unbundling patches
> to python-pip. The group consensus was that it wasn't worth the effort
> to maintain these patches.

FYI, this is now done, as of pip 21.3.1+dfsg-1.

Updated embedded-code-copies:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70

SR

-- 
Stefano Rivera
  http://tumbleweed.org.za/
  +1 415 683 3272

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Considering letting python-pip use vendored dependencies Stefano Rivera <stefanor@debian.org> - 2021-09-16 01:50 +0200
  Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2021-12-31 22:50 +0100
  Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2022-01-16 16:10 +0100
    Re: Considering letting python-pip use vendored dependencies Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-16 16:20 +0100

csiph-web