• Re: URL mangling in https://pypi.debian.net/

    From Dmitry Shachnev@21:1/5 to Alexandre Detiste on Wed Dec 18 10:20:02 2024
    Hi Alexandre!

    On Tue, Dec 17, 2024 at 11:57:18PM +0100, Alexandre Detiste wrote:
    Hi,

    I've noticed a recent pattern with archives published on PyPi :
    the "-" we expect in the regexp specified in d/watch is now an underscore.

    So the tracker got the false information that everything is up-to-date

    With some horribly wretched code I can find some projects with updates pending.
    https://paste.debian.net/1340327/

    One field got duplicated in the output but I'm not running
    the code again immediately because it can be considered abuse
    by who run pypi.debian.net.

    Ideas ?

    I think pypi.debian.net does not mangle the file names in any way, it just takes them from upstream PyPI verbatim.

    And the change from - to _ is caused by more build tools adopting this specification [1], which says:

    “In distribution names, any run of -_. characters (HYPHEN-MINUS, LOW LINE and FULL STOP) should be replaced with _ (LOW LINE), and uppercase characters should be replaced with corresponding lowercase ones.”

    This link is for binary distributions, but there is a separate specification for source distributions [2] which says that rules are the same.

    [1]: https://packaging.python.org/en/latest/specifications/binary-distribution-format/#escaping-and-unicode
    [2]: https://packaging.python.org/en/latest/specifications/source-distribution-format/#source-distribution-file-name

    --
    Dmitry Shachnev

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEq2sdvrA0LydXHe1qsmYUtFL0RrYFAmdik7EACgkQsmYUtFL0 RrYs9BAAtf7Las8wm5glDcUS6w6OEhnP1Ei00M49hAFtuDcvcibLraW1yfMIa0io 9SDjnivZeR6ap53cfxTEnY/f74czteLZaS8xJcbfI+m6htF45OkkUic03h7zWdr5 ERHvWSAIgl00i6fSTATlxo//fbtutu3qOzxlGJ3Be0gxIDzgxmVL6vaa9RR9/zgR Bu16Am4nHqpQM7qKDBpHTs1D5Nr8bBoad7yW4LSnPb9JJP1GgnINLg6fzGES1GE7 beK5f5qqcxAu8MVcG16Z28X+AnM3GKpq4OslaIaUDG+6xvLZLcdGtmSLwZtHJhq1 A0U4/Sqoj3k7YZYfvmCcPeO5H86HIwggbFaWTVzl67qaY1Ih6CNDpk0ZgFp1khMH RXwP3BFiMFMn+1kiAF9XRkHQc7B1PdXhU8ENfe/nhW5mbx+0szVXTb8r7dEavxWp sZ1XsX6E72Anol+qE8KMDCOIm3nSUUY3dvjpI1XbSjK5g09FXYGHI/XDedsu4/Ng o9piMzDOuHZ02adpou7WricVYa9NMgDiRxEdkNdp/+ttCEuVMuWeDjkvCtM3sRk8 Rvvtq67tftYy4ZJ0BC6LEatO8yzebMkIQIzkDqSJm7V1RSq4DahwMi5Axw4GkbwF CpwogUpJZ+ixrZVRUCJv4rCdrstjUanfoYSnDFfacr3dEpJKcAA=
    =A57/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)