gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-09-24 04:59:14 -07:00
Code Issues Projects Releases Wiki Activity

dev-python/pypi-attestations: Skip provenance check on upgrade cycle

Browse Source 
Detect when dev-python/sigstore has been upgraded already but
dev-python/pypi-attestations are still old, and skip the provenance
check for a clean upgrade.  This should be safe since the distfiles is
still verified against our Manifests.

Closes: https://bugs.gentoo.org/969332
Signed-off-by: Michał Górny <mgorny@gentoo.org>
This commit is contained in:
Michał Górny
2026-04-05 20:49:09 +02:00
parent ef0856d716
commit 164cd32c00
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
dev-python/pypi-attestations/pypi-attestations-0.0.29.ebuild
View File

@@ -38,3 +38,17 @@ BDEPEND="
EPYTEST_PLUGINS=() EPYTEST_PLUGINS=()
distutils_enable_tests pytest distutils_enable_tests pytest
src_unpack() {
if use verify-provenance &&
has_version "<dev-python/pypi-attestations-0.0.28" &&
has_version ">=dev-python/sigstore-4"
then
# https://bugs.gentoo.org/969332
einfo "Skipping provenance check due to sigstore/pypi-attestations upgrade cycle"
default
return
fi
pypi_src_unpack
}