community/twine uses py3-importlib-metadata without declaring dependency - patch not applied?
- 00f3903a removed the explicit dependency on py3-importlib-metadata
- today py3-importlib-metadata is installed with twine because it is required by py3-keyring which in turn is required by twine
- importlib-metadata.patch is present in git but is not listed in sha512sums in the APKBUILD
Steps to reproduce:
Install twine:
apk add twine
Get the path to the file that is installed:
~ # python3 -c "print(__import__('twine').__file__)"
/usr/lib/python3.11/site-packages/twine/__init__.py
Note that importlib_metadata
is still present and importlib.metadata
is not:
~ # grep importlib.metadata /usr/lib/python3.11/site-packages/twine/__init__.py
import importlib_metadata
metadata = importlib_metadata.metadata("twine")
Note that py3-importlib-metadata is installed because it is required by py3-keyring which in turn is required by twine:
~ # apk info --installed py3-importlib-metadata
py3-importlib-metadata
Possible solutions
- Add importlib-metadata.patch to sha512sums and check that it is applied
- Add py3-importlib-metadata to depends and remove importlib-metadata.patch from git