# Copyright 2025-2026 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2

EAPI=8

DISTUTILS_USE_PEP517=setuptools
PYPI_VERIFY_REPO=https://github.com/pypi/pypi-attestations
PYTHON_COMPAT=( python3_{11..14} )

inherit distutils-r1 pypi

DESCRIPTION="Convert between Sigstore Bundles and PEP-740 Attestation objects"
HOMEPAGE="
	https://github.com/pypi/pypi-attestations/
	https://pypi.org/project/pypi-attestations/
"

LICENSE="MIT"
SLOT="0"
KEYWORDS="amd64 ~ppc ~ppc64"

RDEPEND="
	dev-python/cryptography[${PYTHON_USEDEP}]
	dev-python/packaging[${PYTHON_USEDEP}]
	=dev-python/pyasn1-0.6*[${PYTHON_USEDEP}]
	>=dev-python/pydantic-2.10.0[${PYTHON_USEDEP}]
	dev-python/requests[${PYTHON_USEDEP}]
	dev-python/rfc3986[${PYTHON_USEDEP}]
	=dev-python/sigstore-4*[${PYTHON_USEDEP}]
	dev-python/sigstore-models[${PYTHON_USEDEP}]
"
BDEPEND="
	dev-python/setuptools-scm[${PYTHON_USEDEP}]
	test? (
		dev-python/pretend[${PYTHON_USEDEP}]
	)
"

EPYTEST_PLUGINS=()
distutils_enable_tests pytest

src_unpack() {
	if use verify-provenance &&
		has_version "<dev-python/pypi-attestations-0.0.28" &&
		has_version ">=dev-python/sigstore-4"
	then
		# https://bugs.gentoo.org/969332
		einfo "Skipping provenance check due to sigstore/pypi-attestations upgrade cycle"
		default
		return
	fi

	pypi_src_unpack
}