packages: wolfi import batch 3 — python (requests + 27 more, from-source)

packages/blinker/build.ncl

@@ -0,0 +1,32 @@
+# Imported from Wolfi `blinker` by `pkgmgr import-wolfi` (python build).
+# TODO: REVIEWER — verify the pypi runtime deps (install_requires) + outputs.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let flit-core = import "../flit-core/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "1.9.0" in
+{
+  name = "blinker",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/pallets-eco/blinker/%{version}.tar.gz",
+      sha256 = "9b02df578ec0aadd5e800e5f09281e80abddab5e0f74b4b88694f06c9956b6aa",
+      extract = true,
+      strip_prefix = "blinker-%{version}",
+    } | Source,
+    base,
+    flit-core,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    everything = { glob = "usr/**", allow_executable = true } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "pallets-eco", repo = "blinker" },
+      license_spdx = "MIT",
+    } | Attrs,
+} | BuildSpec

packages/blinker/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `blinker` (1.9.0, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" blinker

packages/boltons/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `boltons` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let flit-core = import "../flit-core/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "26.0.0" in
+{
+  name = "boltons",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/mahmoud/boltons/%{version}.tar.gz",
+      sha256 = "c1b7eb5fd76e04093b5c0151ca1ac4b064faf4b736eaf1c0c83a8de101ccae14",
+      extract = true,
+      strip_prefix = "boltons-%{version}",
+    } | Source,
+    base,
+    flit-core,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/boltons/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/boltons-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "mahmoud", repo = "boltons" },
+      license_spdx = "BSD-3-Clause",
+    } | Attrs,
+} | BuildSpec

packages/boltons/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `boltons` (26.0.0, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" boltons

packages/calver/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `calver` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let setuptools = import "../setuptools/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "2025.10.20" in
+{
+  name = "calver",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/di/calver/%{version}.tar.gz",
+      sha256 = "8378c74d31e7d04ab1fd00f0a0d128525941823134c1e79dbcd649d3c130fc03",
+      extract = true,
+      strip_prefix = "calver-%{version}",
+    } | Source,
+    base,
+    setuptools,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/calver/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/calver-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python, setuptools],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "di", repo = "calver" },
+      license_spdx = "Apache-2.0",
+    } | Attrs,
+} | BuildSpec

packages/calver/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `calver` (2025.10.20, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" calver

packages/certifi/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `certifi` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let setuptools = import "../setuptools/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "2026.06.17" in
+{
+  name = "certifi",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/certifi/python-certifi/%{version}.tar.gz",
+      sha256 = "de76d4c70f5a4fecce2522a11e01b57ea75d41d878bc590dcc43290d26a0acc8",
+      extract = true,
+      strip_prefix = "python-certifi-%{version}",
+    } | Source,
+    base,
+    setuptools,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/certifi/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/certifi-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "certifi", repo = "python-certifi" },
+      license_spdx = "MPL-2.0",
+    } | Attrs,
+} | BuildSpec

packages/certifi/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `certifi` (2026.06.17, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" certifi

packages/certifi/use-alpine-system-certs.patch

@@ -0,0 +1,56 @@
+# originated from https://git.alpinelinux.org/aports/tree/main/py3-certifi/use-alpine-system-certs.patch
+
+NEVER EVER REMOVE THIS PATCH
+REBASE IT ON TOP OF THE VERSION YOU'RE UPGRADING
+
+This makes py3-certifi use the system certificates provided by Alpine Linux
+instead of the ones provided with py3-certifi instead, this allows us to add
+this package as a dependency for other packages without worries.
+
+This is based on the patch used by Debian
+
+diff --git a/certifi/core.py b/certifi/core.py
+index 1c9661c..32423f7 100644
+--- a/certifi/core.py
++++ b/certifi/core.py
+@@ -10,13 +10,13 @@ import atexit
+ def exit_cacert_ctx() -> None:
+     _CACERT_CTX.__exit__(None, None, None)  # type: ignore[union-attr]
+
++ALPINE_CA_CERTS_PATH = '/etc/ssl/certs/ca-certificates.crt'
+
+ if sys.version_info >= (3, 11):
+
+     from importlib.resources import as_file, files
+
+-    _CACERT_CTX = None
+-    _CACERT_PATH = None
++    _CACERT_PATH = ALPINE_CA_CERTS_PATH
+
+     def where() -> str:
+         # This is slightly terrible, but we want to delay extracting the file
+@@ -44,14 +44,14 @@ if sys.version_info >= (3, 11):
+         return _CACERT_PATH
+
+     def contents() -> str:
+-        return files("certifi").joinpath("cacert.pem").read_text(encoding="ascii")
++        with open(where(), "r", encoding="ascii") as data:
++            return data.read()
+
+ else:
+
+     from importlib.resources import path as get_path, read_text
+
+-    _CACERT_CTX = None
+-    _CACERT_PATH = None
++    _CACERT_PATH = ALPINE_CA_CERTS_PATH
+
+     def where() -> str:
+         # This is slightly terrible, but we want to delay extracting the
+@@ -80,4 +80,5 @@ else:
+         return _CACERT_PATH
+
+     def contents() -> str:
+-        return read_text("certifi", "cacert.pem", encoding="ascii")
++        with open(where(), "r", encoding="ascii") as data:
++            return data.read()

packages/charset-normalizer/build.ncl

@@ -0,0 +1,47 @@
+# Imported from Wolfi `charset-normalizer` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputBin, OutputData, Source, Test, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let setuptools = import "../setuptools/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "3.4.9" in
+{
+  name = "charset-normalizer",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/jawah/charset_normalizer/%{version}.tar.gz",
+      sha256 = "5b7bcc5c09e1e8c1ba0173bbb829385bde1dc8e2f8f47230a690f27882b755d2",
+      extract = true,
+      strip_prefix = "charset_normalizer-%{version}",
+    } | Source,
+    base,
+    setuptools,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    normalizer = { glob = "usr/bin/normalizer" } | OutputBin,
+    python_site_package = { glob = "usr/lib/python*/site-packages/charset_normalizer/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/charset_normalizer-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "jawah", repo = "charset_normalizer" },
+      license_spdx = "MIT",
+    } | Attrs,
+  tests = {
+    smoke =
+      {
+        class = 'Standalone,
+        test_deps = [base],
+        cmds = [
+          # Smoke test ported from the Wolfi recipe's test block.
+          ["/bin/bash", "-c", "normalizer --help"],
+          ["/bin/bash", "-c", "normalizer --version"],
+          ["/bin/bash", "-c", "normalizer --version"],
+        ],
+      } | Test,
+  },
+} | BuildSpec

packages/charset-normalizer/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `charset-normalizer` (3.4.9, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" charset-normalizer

packages/click/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `click` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let flit-core = import "../flit-core/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "8.4.2" in
+{
+  name = "click",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/pallets/click/%{version}.tar.gz",
+      sha256 = "d5635f9b7999806a02bd323fc7a9f8c4b1cb5f600b2967d4e7e5dbb106b1c216",
+      extract = true,
+      strip_prefix = "click-%{version}",
+    } | Source,
+    base,
+    flit-core,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/click/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/click-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "pallets", repo = "click" },
+      license_spdx = "BSD-3-Clause",
+    } | Attrs,
+} | BuildSpec

packages/click/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `click` (8.4.2, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" click

packages/distro/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `distro` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let setuptools = import "../setuptools/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "1.9.0" in
+{
+  name = "distro",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/python-distro/distro/v%{version}.tar.gz",
+      sha256 = "6ede051357868ed427ea71d16fc27f4d63cc0d9c8a32788aa11c450ecefcc76f",
+      extract = true,
+      strip_prefix = "distro-%{version}",
+    } | Source,
+    base,
+    setuptools,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/distro/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/distro-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "python-distro", repo = "distro" },
+      license_spdx = "Apache-2.0",
+    } | Attrs,
+} | BuildSpec

packages/distro/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `distro` (1.9.0, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" distro

packages/editables/build.ncl

@@ -0,0 +1,33 @@
+# Imported from Wolfi `editables` by `pkgmgr import-wolfi` (python build),
+# with outputs refined from a verified `minimal package` build.
+let { Attrs, BuildSpec, Local, OutputData, Source, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let flit-core = import "../flit-core/build.ncl" in
+let python = import "../python/build.ncl" in
+let version = "0.6" in
+{
+  name = "editables",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "gs://minimal-staging-archives/pfmoore/editables/%{version}.tar.gz",
+      sha256 = "766d9b40616dbcf5cc920e9db26dd915de999cfab75768ff05b3ebf9c389acb2",
+      extract = true,
+      strip_prefix = "editables-%{version}",
+    } | Source,
+    base,
+    flit-core,
+  ],
+  cmd = "./build.sh",
+  outputs = {
+    python_site_package = { glob = "usr/lib/python*/site-packages/editables/**" } | OutputData,
+    python_dist_info = { glob = "usr/lib/python*/site-packages/editables-*.dist-info/**" } | OutputData,
+  },
+  runtime_deps = [python],
+  attrs =
+    {
+      upstream_version = version,
+      source_provenance = { category = 'GithubRepo, owner = "pfmoore", repo = "editables" },
+      license_spdx = "MIT",
+    } | Attrs,
+} | BuildSpec

packages/editables/build.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Imported from Wolfi `editables` (0.6, python) by pkgmgr import-wolfi.
+set -eu
+pip3 wheel -w dist --no-build-isolation --no-deps --no-cache-dir "$(pwd)"
+pip3 install --no-index --find-links dist --no-deps --no-user --root "$OUTPUT_DIR" editables