Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod From: =?UTF-8?Q?Louis-Philippe_V=c3=a9ronneau?= Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Sun, 27 Jun 2021 01:00:03 +0200 Message-ID: References: X-Original-To: debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Sat Jun 26 22:52:00 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-11.198 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BODY_8BITS=1.5, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 X-Riseup-User-ID: 7174132687B33321445768E3D64F1A01EE0E91CC8ECD23C73FEF83CC66A46F9C MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="KV3bgShLMLPabSkl5aGdWvvBfEPPJ7uBK" X-Mailing-List: archive/latest/19244 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org Approved: robomod@news.nic.it Lines: 67 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sat, 26 Jun 2021 18:51:26 -0400 X-Original-Message-ID: <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> Xref: csiph.com linux.debian.maint.python:13454 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KV3bgShLMLPabSkl5aGdWvvBfEPPJ7uBK Content-Type: multipart/mixed; boundary="aF76M1cATfH6cz2fu4FapZ86SFgTgGKLN"; protected-headers="v1" From: =?UTF-8?Q?Louis-Philippe_V=c3=a9ronneau?= To: debian-python@lists.debian.org Message-ID: <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> In-Reply-To: <877dihvfp9.fsf@DigitalMercury.dynalias.net> --aF76M1cATfH6cz2fu4FapZ86SFgTgGKLN Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2021-06-25 16 h 42, Nicholas D Steeves wrote: > Hi Team! >=20 > I feel like there is probably consensus against the use of PyPi-provide= d > upstream source tarballs in preference for what will usually be a GitHu= b > release tarball, so I made an MR to this effect (moderate recommendatio= n > rather than a "must" directive): >=20 > https://salsa.debian.org/python-team/tools/python-modules/-/merge_req= uests/16 I don't often use PyPi releases because of the issues mentioned in the MR, but I think Jeremy's point is valid. IMO, rewording the text so that it clearly says "should" and not "must" would fix the issues at hand, as long as people justify their usage of PyPi when it's "The Right Thing" in a file somewhere. To me, the most important thing is that all packages must at least run the upstream testsuite when it exists (I'm planning on writing a policy proposal saying this after the freeze). If PyPi releases include them, I think it's fine (but they often don't). --=20 =E2=A2=80=E2=A3=B4=E2=A0=BE=E2=A0=BB=E2=A2=B6=E2=A3=A6=E2=A0=80 =E2=A3=BE=E2=A0=81=E2=A2=A0=E2=A0=92=E2=A0=80=E2=A3=BF=E2=A1=81 Louis-= Philippe V=C3=A9ronneau =E2=A2=BF=E2=A1=84=E2=A0=98=E2=A0=B7=E2=A0=9A=E2=A0=8B pollo@debian.o= rg / veronneau.org =E2=A0=88=E2=A0=B3=E2=A3=84 --aF76M1cATfH6cz2fu4FapZ86SFgTgGKLN-- --KV3bgShLMLPabSkl5aGdWvvBfEPPJ7uBK Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQTKp0AHB6gWsCAvw830JXpQshz6hQUCYNevbgAKCRD0JXpQshz6 hQTLAP9XQBUIL2v6Tep5ga5XK9nEfTREH1tKWpG/Ma0XRa262gEA9LuJykn0QIek RkG+aoy8bODySRfH+iJac2YQ42T70g4= =2jmO -----END PGP SIGNATURE----- --KV3bgShLMLPabSkl5aGdWvvBfEPPJ7uBK--