Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Elena ``of Valhalla'' Grandi Newsgroups: linux.debian.maint.python Subject: Re: Dependency on pkg-resources Date: Tue, 03 Dec 2024 13:30:02 +0100 Message-ID: References: X-Original-To: debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Tue Dec 3 12:29:16 2024 Old-Return-Path: X-Amavis-Spam-Status: No, score=-7.698 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, PGPSIGNATURE=-5, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .trueelena. - helo: .mslow1.mail.gandi. - helo-domain: .gandi.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5 Mail-Followup-To: debian-python@lists.debian.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mJttShGhnqKQDBui" Content-Disposition: inline X-Gnd-Sasl: valhalla@trueelena.org X-Mailing-List: archive/latest/22604 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/Z072zSG7RQfVcQ57@virginsteele.home.trueelena.org Approved: robomod@news.nic.it Lines: 48 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Tue, 3 Dec 2024 13:17:17 +0100 X-Original-Message-ID: X-Original-References: <20241006140644.evsxpbdlso4dnvvz@satie.tumbleweed.org.za> Xref: csiph.com linux.debian.maint.python:16519 --mJttShGhnqKQDBui Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello On 2024-10-06 at 14:06:44 +0000, Stefano Rivera wrote: > [A dependency on pkg-resources is] coming from an upstream dependency > on setuptools (requires). > [...] > So, in your case, the upstream probably has a completely unnecessary > requires for setuptools. Probably should use install_requires instead, > or even better pyproject's build-system requires. I have a package (python-ghostscript) that is in a similar case, with a dependency on pkg-resources picked up from a dependency on setuptools, but I can't understand why it's happening:=20 * setuptools is mentioned in requirements.txt, but the other packages in that file aren't picked up as dependencies (which is good); * setuptools is mentioned in tox.ini, which should be totally irrelevant; * python3-setuptools is in Build-Depends, again probably not relevant; * setuptools is mentioned in setup.py *and* setup.cfg, but in both cases it is listed as an install_requires, not a requires. Anybody has any hint on what could be happening here? --=20 Elena ``of Valhalla'' --mJttShGhnqKQDBui Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEEY8n6rGg5PpTPkl4ZcL0i0xEjtDEFAmdO9soACgkQcL0i0xEj tDGq4Af/S7urr/931IkYU0a5HBHimH1SWyVR/SANO4XO9KMRC/pqnHl4gHfly50n m3Yub+JnTaT/65fWzMFiBTyzEC0FC0aSAPPzPIpFGkIlD9rRgH6IdCsz8W4dOx8d i1zv1bP8tfYIFduIpTv3XKjIjcZ0bN9O4ctQ0A5jb/PPR7IBtr1LlZsA6UDN10rT tkLA9Ec4aC9ULjJ3Qx14VPZsvCm2GAWooB4iQO8XlSouFJdSrVB4ATwL2mTK2PIx WfDcN83bHqt2l2+etGMaO4+bW43/uBRlkLDFyYQbOuzooBfRPRiZHcHmvpQvhO7v CBAV+HrSjsQd97XFUriuj8hnW8xjdQ== =lBBc -----END PGP SIGNATURE----- --mJttShGhnqKQDBui--