Hi Matthias,

Please consider patch hereunder to help trim a bit the key_package set.

Greetings

Alexandre
--- setuptools-84.0.0/debian/control    2026-09-01 09:25:31.000000000 +0200
+++ ../setuptools-84.0.0/debian/control 2026-10-07 20:55:00.961384453 +0200
@@ -5,16 +5,17 @@
 Build-Depends:
  debhelper-compat (= 13),
  dh-python,
- furo,
+ dh-sequence-sphinxdoc <!nodoc>,
+ furo <!nodoc>,
  python3-all,
- python3-doc,
- python3-alabaster,
- python3-sphinx,
- python3-sphinx-favicon,
- python3-sphinx-inline-tabs,
- python3-sphinx-notfound-page,
- python3-sphinx-reredirects,
- python3-sphinxcontrib-towncrier,
+ python3-doc <!nodoc>,
+ python3-alabaster <!nodoc>,
+ python3-sphinx <!nodoc>,
+ python3-sphinx-favicon <!nodoc>,
+ python3-sphinx-inline-tabs <!nodoc>,
+ python3-sphinx-notfound-page <!nodoc>,
+ python3-sphinx-reredirects <!nodoc>,
+ python3-sphinxcontrib-towncrier <!nodoc>,
  python3-wheel
 #Build-Conflicts: python-setuptools, python3-setuptools, pypy-setuptools
 Standards-Version: 4.7.4
--- setuptools-84.0.0/debian/rules      2026-09-01 09:09:50.000000000 +0200
+++ ../setuptools-84.0.0/debian/rules   2026-10-07 20:55:13.515212080 +0200
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f

 %:
-       dh $@ --with python3,sphinxdoc --buildsystem pybuild
+       dh $@ --with python3 --buildsystem pybuild

 override_dh_auto_test:

@@ -9,9 +9,9 @@

 override_dh_auto_install:
        dh_auto_install
-
+ifeq (,$(findstring nodoc, $(DEB_BUILD_OPTIONS)))
        PYTHONPATH=$(CURDIR) $(MAKE) -C docs html
-
+endif
        mkdir -p debian/python3-setuptools-whl/usr/share/python-wheels
        python3 setup.py bdist_wheel \
                -d debian/python3-setuptools-whl/usr/share/python-wheels

We believe that the bug you reported is fixed in the latest version of
setuptools, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1150264@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <doko@debian.org> (supplier of updated setuptools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 20 Oct 2026 14:09:45 +0200
Source: setuptools
Architecture: source
Version: 84.2.0-1
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Matthias Klose <doko@debian.org>
Closes: 1148399 1150264
Changes:
 setuptools (84.2.0-1) unstable; urgency=medium
 .
   * New upstream version.
   * Remove dependencies on vendored modules. Closes: #1148399.
   * setuptools v84 addresses CVE-2026-23949.
   * Add a nodoc build profile (Alexandre Detiste). Closes: #1150264.
Checksums-Sha1:
 bb59db21ff99cf6a465b4d39cdf06f912b4148fe 2289 setuptools_84.2.0-1.dsc
 fb21c4b23316fd92f249c5287bee7f200fcd2318 1227656 setuptools_84.2.0.orig.tar.gz
 64c82ca4b3d9d39bc8b3e082505643cff731edda 14280 setuptools_84.2.0-1.debian.tar.xz
 35e3718553e6e81cf3a580ac80fe7bdf184036da 7932 setuptools_84.2.0-1_source.buildinfo
Checksums-Sha256:
 227415d8543e88d6060bd8afb06c51f54b3efba90ef89686011f09c7fb206bbb 2289 setuptools_84.2.0-1.dsc
 6f445ca2ce864605f81e223f262b4c94ffcb9a4a63473bae0ed7be5aab0291da 1227656 setuptools_84.2.0.orig.tar.gz
 08e145ed035710a66a53418a6f67fccfe939379815af82111840bea2a43c4372 14280 setuptools_84.2.0-1.debian.tar.xz
 483a2056f7556e56e6c541803a3e1e4ca54afb7eedd8082a58942ef6e67f6a97 7932 setuptools_84.2.0-1_source.buildinfo
Files:
 d9df50fbeae00782b700605f071f6a86 2289 python optional setuptools_84.2.0-1.dsc
 7ab7354051a0bdd8c05559c90f9f0fc3 1227656 python optional setuptools_84.2.0.orig.tar.gz
 ea750ea3721d57259bd093ef886d52d2 14280 python optional setuptools_84.2.0-1.debian.tar.xz
 ece2e32f24aff3a5ae4846e76f1f431b 7932 python optional setuptools_84.2.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=iQU1
-----END PGP SIGNATURE-----