Control: tags 1125848 + patch Control: tags 1125848 + pending Dear maintainer,
I've prepared an NMU for python-httpsig (versioned as 1.3.0-3.1) and uploaded it. Please find the simplistic patch in attachment. Regards. diffstat for python-httpsig-1.3.0 python-httpsig-1.3.0 changelog | 7 +++++++ control | 1 - patches/pkg-resources.patch | 17 +++++++++++++++++ patches/series | 1 + 4 files changed, 25 insertions(+), 1 deletion(-) diff -Nru python-httpsig-1.3.0/debian/changelog python-httpsig-1.3.0/debian/changelog --- python-httpsig-1.3.0/debian/changelog 2025-05-24 09:35:41.000000000 +0200 +++ python-httpsig-1.3.0/debian/changelog 2026-08-31 14:34:52.000000000 +0200 @@ -1,3 +1,10 @@ +python-httpsig (1.3.0-3.1) unstable; urgency=medium + + * Non-maintainer upload. + * Patch-out usage of python3-pkg-resources (Closes: #1125848) + + -- Alexandre Detiste <[email protected]> Mon, 31 Aug 2026 14:34:52 +0200 + python-httpsig (1.3.0-3) unstable; urgency=medium * Added missing runtime dependency diff -Nru python-httpsig-1.3.0/debian/control python-httpsig-1.3.0/debian/control --- python-httpsig-1.3.0/debian/control 2025-05-24 09:35:41.000000000 +0200 +++ python-httpsig-1.3.0/debian/control 2026-08-31 14:34:05.000000000 +0200 @@ -18,7 +18,6 @@ Architecture: all Depends: ${misc:Depends}, ${python3:Depends}, - python3-pkg-resources Description: sign HTTP requests (IETF HTTP Signatures) - Python 3 version of the package Sign HTTP requests with secure signatures according to the draft IETF HTTP Signatures specification. diff -Nru python-httpsig-1.3.0/debian/patches/pkg-resources.patch python-httpsig-1.3.0/debian/patches/pkg-resources.patch --- python-httpsig-1.3.0/debian/patches/pkg-resources.patch 1970-01-01 01:00:00.000000000 +0100 +++ python-httpsig-1.3.0/debian/patches/pkg-resources.patch 2026-08-31 14:33:32.000000000 +0200 @@ -0,0 +1,17 @@ +--- a/httpsig/__init__.py ++++ b/httpsig/__init__.py +@@ -1,12 +1,7 @@ +-from pkg_resources import get_distribution, DistributionNotFound ++__version__ = '1.3.0' ++ + + from .sign import Signer, HeaderSigner + from .verify import Verifier, HeaderVerifier + +-try: +- __version__ = get_distribution(__name__).version +-except DistributionNotFound: +- # package is not installed +- pass +- + __all__ = (Signer, HeaderSigner, Verifier, HeaderVerifier) diff -Nru python-httpsig-1.3.0/debian/patches/series python-httpsig-1.3.0/debian/patches/series --- python-httpsig-1.3.0/debian/patches/series 2025-05-24 09:35:41.000000000 +0200 +++ python-httpsig-1.3.0/debian/patches/series 2026-08-31 14:32:41.000000000 +0200 @@ -1,2 +1,3 @@ 2000-known-version.patch 2001-cryptodomex-namespace.patch +pkg-resources.patch

