Package: python-pip / 20.3.4-4+deb11u1

Metadata

Package Version Patches format
python-pip 20.3.4-4+deb11u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
hands off system packages.patch | (download)

src/pip/_internal/utils/misc.py | 37 28 + 9 - 0 !
1 file changed, 28 insertions(+), 9 deletions(-)

 prevent pip from removing system packages.

Adjust is_local() to consider OS-owned paths non-local.  Fix the error
message for is_local() in the non-virtualenv case.

debundle.patch | (download)

src/pip/_vendor/__init__.py | 7 5 + 2 - 0 !
1 file changed, 5 insertions(+), 2 deletions(-)

 devendorize wheels and use system built wheels.

Patch-Name: debundle.patch

handle unbundled requests.patch | (download)

src/pip/_vendor/__init__.py | 8 6 + 2 - 0 !
1 file changed, 6 insertions(+), 2 deletions(-)

 debian already unbundles things from requests.

Patch-Name: handle-unbundled-requests.patch

set_user_default.patch | (download)

docs/html/user_guide.rst | 8 5 + 3 - 0 !
src/pip/_internal/commands/install.py | 32 29 + 3 - 0 !
2 files changed, 34 insertions(+), 6 deletions(-)

 default to --user in non-virtual environments.

When running as a normal user in a non-virtual environment, default to
--user.  When inside virtual environments, when running as root or when
--prefix or --target are specified, keep the default behavior.

disable pip version check.patch | (download)

src/pip/_internal/cli/cmdoptions.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 set --disable-pip-version-check=true by default.

Patch-Name: disable-pip-version-check.patch

commands_list_version_workaround.patch | (download)

src/pip/_internal/commands/list.py | 6 4 + 2 - 0 !
1 file changed, 4 insertions(+), 2 deletions(-)

 make sure pip's version parsing is always used

Bug-Debian: https://bugs.debian.org/912379
add_pkg resources_to_freeze.patch | (download)

src/pip/_internal/commands/freeze.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 include pkg-resources in freeze system wheels

Bug-Debian: https://bugs.debian.org/871790
wheel and pip not pip wheels.patch | (download)

src/pip/_vendor/__init__.py | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 wheel and pip not pip wheels


debian python2.7 sysconfig workaround.patch | (download)

src/pip/_internal/locations.py | 16 11 + 5 - 0 !
src/pip/_internal/utils/misc.py | 6 1 + 5 - 0 !
2 files changed, 12 insertions(+), 10 deletions(-)

 debian python2.7 sysconfig workaround


debug command for unbundled.patch | (download)

src/pip/_internal/commands/debug.py | 23 22 + 1 - 0 !
1 file changed, 22 insertions(+), 1 deletion(-)

 debug command for unbundled


str version.patch | (download)

src/pip/_internal/req/req_install.py | 12 10 + 2 - 0 !
src/pip/_internal/resolution/resolvelib/candidates.py | 8 4 + 4 - 0 !
src/pip/_internal/resolution/resolvelib/resolver.py | 3 2 + 1 - 0 !
src/pip/_internal/wheel_builder.py | 3 2 + 1 - 0 !
4 files changed, 18 insertions(+), 8 deletions(-)

 re-parse pkg_resources versions from str

git split ascii.patch | (download)

src/pip/_internal/vcs/git.py | 10 8 + 2 - 0 !
1 file changed, 8 insertions(+), 2 deletions(-)

 security: don't split git references on unicode separators

Previously, maliciously formatted tags could be used to hijack a
commit-based pin. Using the fact that the split here allowed for
all of unicode's whitespace characters as separators -- which git allows
native map.patch | (download)

src/pip/_internal/commands/list.py | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 use native map() instead of map_multithread()

Avoids a race-condition when using zip-imported dependencies.