Path: csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Jeroen Ploemen Newsgroups: linux.debian.maint.python Subject: review for python-pgvector/0.4.2-1 Date: Mon, 23 Feb 2026 17:50:01 +0100 Message-ID: X-Mailbox-Line: From debian-python-request@lists.debian.org Mon Feb 23 16:41:19 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.41 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no X-Mailer: Claws Mail 4.3.1 (GTK 3.24.33; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/NbvpivKWEUEdOR3wnbrG/.L"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Debian-User: jcfp X-Mailing-List: archive/latest/23666 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20260223164040.492b6a46@debian.org Approved: robomod@news.nic.it Lines: 95 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-python@lists.debian.org X-Original-Date: Mon, 23 Feb 2026 16:40:40 -0000 X-Original-Message-ID: <20260223164040.492b6a46@debian.org> Xref: csiph.com linux.debian.maint.python:17406 --Sig_/NbvpivKWEUEdOR3wnbrG/.L Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable hi Arian, I took a look at the python-pgvector package, up for sponsorship in the Python team: * there's diff between the orig tarball pulled in by uscan and the one generated from the pristine-tar branch: (output from tardiff -m -s)=20 + .github + .github/workflows + .github/workflows/build.yml + .gitignore + CHANGELOG.md + Makefile - PKG-INFO + examples [...] - pgvector.egg-info [...] + requirements.txt - setup.cfg + tests/__init__.py * changelog: for an all new package, please keep only the initial release entry that closes the ITP bug. * d/gbp.conf: why the 'sign-tags =3D False'? * control: (iirc) on the buildds, alternatives in build-deps aren't considered the same way you would expect them to when installing a binary package. * control: please mark test-only build-dependencies as such. * control: the upstream project is called pgvector-python, that could be used for the source package name in Debian as well. (info only) * control: doesn't having a build-dep on "postgresql-all" make the one on "postgresql" redundant? * control: the binary package seems to be missing most Python module dependencies apart from numpy: the code also imports asyncpg, django, peewee, psycopg, psycopg2, scipy, sqlalchemy but none of those appear as dependencies. * rules: "export PYBUILD_NAME=3Dpython-pgvector" - is that so? * autopkgtest: please avoid adding or duplicating any dependency that should exist on the binary package in the first place (see above), all that does is hide bugs. The only dependencies you want here are the binary package being tested, plus whatever is specifically needed for running the testsuite. For Python packages that typically includes python3-all as well as pytest or similar testing frameworks, and (in this case) the database server stuff. * autopkgtest: please test with all supported Python versions. The salsa CI logs show both 3.13 and 3.14 tested on build, but only 3.13 in the autopkgtest. * patches: 0001 says 'forwarded: not needed' but looks like it wouldn't do any harm upstream either? * lintian: no need to override lintian hits that are factually correct, even if you expect them to be fixed when your upstream pull request gets merged. Once the above comments have been addressed, simply re-add the package to the IRC channel topic and/or ping me by e-mail. [1]https://codesearch.debian.net/search?q=3Dpath%3Adebian%2Frules+for+pyver= s+in+%24%28PYTHON3S%29&literal=3D1 --Sig_/NbvpivKWEUEdOR3wnbrG/.L Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEd8lhnEnWos3N8v+qQoMEoXSNzHoFAmmcgwkACgkQQoMEoXSN zHoMEQ//e1vnyw8IwT/6Y6hT6xAWVjrFaZjEli0VJU9D4dhlgMLVtyN+/uPTmiCd BBeMWTWwuH+m0yKr+YLzmRYLaOcc24TCWS3p5DxQOPU3GJDZo086MBolXz2ySQyR wK14ZCrDT5ytwhB9bQPs0Ev+Mb2V/eZspplG45SSKegLONkqNDuzMWO6DTkguthe n2BD5ILqAGfQSgdb7u6uJ9bCC34HCQ1pNo7/k+V5oV717gi0EtoeVAtMlvypx0yK sXP5B60yuyeDW1B1Zgn4ir3T9t8iTZYCPPQcW8YX5VVxYLPWpoLokhw0/qI8++ZR KjzUVYghbXf3vji4aIkR6FGyTJgtGIihl5dhCN7ZC1mpStOvmTANGUkf1iE4Qw4e N9bBqAoPEL+qJVfX+miEO9T9tA+kzXe2OF51BXtbz4n4rG/mA1XqUkiwl1cBxiOT jincGkVXgCx2PDIVxuBDLAZlnh9uqc0qjxmuZ6/4j+4j/PxBXIvFZJq26eNKzaQ/ H1WoyhvdHbVO+dvxASwTL7t7dd/8DJYQKLCz4GnewVpbQ6UrMHgAbN+d2ILDLl7d mEz7r5ItjVbyCbjRp5jpciChQLZ3mDca1vldLx3gHXTDdPIJthsZcryY+UbZB/dN yRgAZfS9gW+xNDP8ocgfRIwe1ls17FGfZHzAdPMUQ2QWvbwRawg= =TWEM -----END PGP SIGNATURE----- --Sig_/NbvpivKWEUEdOR3wnbrG/.L--