Commit Graph

5 Commits

Author SHA1 Message Date
Fabrice Fontaine acad8ffb5f lang/python/python-pip: fix PKG_CPE_ID
There is not a single CVE linked to python:pip so use pypa:pip instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️pypa:pip

Moreover, CPE_ID missed PKG_ prefix

Fixes: eee273507b (python3: Split pip into separate source package)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 16:03:49 -08:00
Jeffery To 548fdba3fd
python-pip: Update to 23.3.1, redo/refresh patches
001-pyproject-hooks-pyc-fix.patch and 002-pip-runner-pyc-fix.patch are
redone to use source files if they are present.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-26 20:16:42 +08:00
Jeffery To 87fe943112 python-pip: Update to 23.2.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-07-24 22:42:05 -07:00
Jeffery To 5e66a69433 python-pip: Update to 23.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-07-17 11:44:53 -07:00
Jeffery To eee273507b
python3: Split pip into separate source package
Packaging pip from a separate source package allows it to stay updated
with upstream.

Host pip will remain installed as part of python3. Host pip is used in a
much more controlled way and so is less critical for it to track
upstream.

This also removes the python-pip-conf package and installs the pip.conf
file as part of python3-pip.

The patch 003-disable-pip-version-check.patch is originally from Debian:
bb079efb8c/debian/patches/disable-pip-version-check.patch

pip was in a separate source package that was removed in
a53d0c5a403d1669e2cf6c59c2be6a9d3ed633a0; this work is not based on that
earlier package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-26 22:06:08 +08:00