From 164cd32c00a7d8a751cc0058b9b7bcf77543fe80 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20G=C3=B3rny?= Date: Sun, 5 Apr 2026 20:49:09 +0200 Subject: [PATCH] dev-python/pypi-attestations: Skip provenance check on upgrade cycle MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Detect when dev-python/sigstore has been upgraded already but dev-python/pypi-attestations are still old, and skip the provenance check for a clean upgrade. This should be safe since the distfiles is still verified against our Manifests. Closes: https://bugs.gentoo.org/969332 Signed-off-by: Michał Górny --- .../pypi-attestations-0.0.29.ebuild | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/dev-python/pypi-attestations/pypi-attestations-0.0.29.ebuild b/dev-python/pypi-attestations/pypi-attestations-0.0.29.ebuild index 5f324a73bdcfd..86c1c46471ab3 100644 --- a/dev-python/pypi-attestations/pypi-attestations-0.0.29.ebuild +++ b/dev-python/pypi-attestations/pypi-attestations-0.0.29.ebuild @@ -38,3 +38,17 @@ BDEPEND=" EPYTEST_PLUGINS=() distutils_enable_tests pytest + +src_unpack() { + if use verify-provenance && + has_version "=dev-python/sigstore-4" + then + # https://bugs.gentoo.org/969332 + einfo "Skipping provenance check due to sigstore/pypi-attestations upgrade cycle" + default + return + fi + + pypi_src_unpack +}