Report forwarded
to Stefano Rivera <[email protected]>: Bug#1083461; Package src:lazr.uri.
(Fri, 04 Oct 2024 09:47:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Matthias Klose <[email protected]>:
New Bug report received and forwarded. Copy sent to Stefano Rivera <[email protected]>.
(Fri, 04 Oct 2024 09:47:03 GMT) (full text, mbox, link).
Subject: lazr.uri: (build-)depends on deprecated module python3-pkg-resources
Date: Fri, 04 Oct 2024 09:43:20 +0000
Package: src:lazr.uri
Version: 1.0.6-4
Severity: normal
Tags: sid trixie
User: [email protected]
Usertags: pkg-resources-deprecation
[This bug is targeted to the upcoming trixie release]
The package build-depends or depends on python3-pkg-resources, which is
deprecated upstream. Details can be found at
https://setuptools.pypa.io/en/latest/pkg_resources.html
Use of pkg_resources is deprecated in favor of importlib.resources,
importlib.metadata and their backports (importlib_resources, importlib_metadata).
Some useful APIs are also provided by packaging (e.g. requirements and version
parsing). Users should refrain from new usage of pkg_resources and should work
to port to importlib-based solutions.
Python 3.12 in unstable provides both importlib_resources and
importlib_metadata, so no additional dependencies on those packages are needed.
Acknowledgement sent
to Colin Watson <[email protected]>:
Extra info received and forwarded to list. Copy sent to Stefano Rivera <[email protected]>.
(Fri, 04 Oct 2024 10:27:03 GMT) (full text, mbox, link).
Subject: Migrating away from pkg_resources is difficult for namespace packages
Date: Fri, 4 Oct 2024 11:22:32 +0100
While pkg_resources is indeed deprecated upstream, there's nothing that
we can sensibly do about it at the Debian level in lazr.* or zope.*, and
it's not even as clear as you might hope what to do upstream. They all
do something like this in an __init__.py (with unimportant variations):
__import__('pkg_resources').declare_namespace(__name__)
As
https://packaging.python.org/en/latest/guides/packaging-namespace-packages/#pkg-resources-style-namespace-packages
says:
If you are creating a new distribution within an existing namespace
package that uses this method then it’s recommended to continue using
this as the different methods are not cross-compatible and it’s not
advisable to try to migrate an existing package.
I know pkg_resources is deprecated for most other purposes, but even
upstream currently advises here not to try to migrate in this case.
Now, I know there've been some attempts to figure this out:
https://github.com/pypa/sample-namespace-packages thinks a migration may
be possible as long as developers are willing to accept some
limitations. But it's still a difficult migration and upstream hasn't
really got going on it; for Zope, see
https://github.com/zopefoundation/meta/issues/194.
Please can you reconsider, and not force this for Debian trixie? I
think we need to keep pkg_resources around for this use case until a
good deal more work has been done on migrating away from it for
namespace packages.
--
Colin Watson (he/him) [[email protected]]
Acknowledgement sent
to Matthias Klose <[email protected]>:
Extra info received and forwarded to list. Copy sent to Stefano Rivera <[email protected]>.
(Sat, 05 Oct 2024 03:09:01 GMT) (full text, mbox, link).
Subject: Re: Migrating away from pkg_resources is difficult for namespace
packages
Date: Sat, 5 Oct 2024 04:34:54 +0200
On 04.10.24 12:22, Colin Watson wrote:
> While pkg_resources is indeed deprecated upstream, there's nothing that
> we can sensibly do about it at the Debian level in lazr.* or zope.*, and
> it's not even as clear as you might hope what to do upstream. They all
> do something like this in an __init__.py (with unimportant variations):
>
> __import__('pkg_resources').declare_namespace(__name__)
>
> As
> https://packaging.python.org/en/latest/guides/packaging-namespace-packages/#pkg-resources-style-namespace-packages
> says:
>
> If you are creating a new distribution within an existing namespace
> package that uses this method then it’s recommended to continue using
> this as the different methods are not cross-compatible and it’s not
> advisable to try to migrate an existing package.
>
> I know pkg_resources is deprecated for most other purposes, but even
> upstream currently advises here not to try to migrate in this case.
> Now, I know there've been some attempts to figure this out:
> https://github.com/pypa/sample-namespace-packages thinks a migration may
> be possible as long as developers are willing to accept some
> limitations. But it's still a difficult migration and upstream hasn't
> really got going on it; for Zope, see
> https://github.com/zopefoundation/meta/issues/194.
>
> Please can you reconsider, and not force this for Debian trixie? I
> think we need to keep pkg_resources around for this use case until a
> good deal more work has been done on migrating away from it for
> namespace packages.
I don't want to force it. the separation of this module into it's own
module is a Debian specific change to avoid runtime dependencies on
pkg_resources. So you'll find a lot of hard-coded dependencies that are
just not used anymore. That's what I want to catch for the trixie release.
Matthias
Reply sent
to Alexandre Detiste <[email protected]>:
You have taken responsibility.
(Sun, 26 Jan 2025 19:09:02 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <[email protected]>:
Bug acknowledged by developer.
(Sun, 26 Jan 2025 19:09:02 GMT) (full text, mbox, link).
Source: lazr.uri
Source-Version: 1.0.6-5
Done: Alexandre Detiste <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lazr.uri, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexandre Detiste <[email protected]> (supplier of updated lazr.uri package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 26 Jan 2025 19:36:29 +0100
Source: lazr.uri
Architecture: source
Version: 1.0.6-5
Distribution: unstable
Urgency: medium
Maintainer: Stefano Rivera <[email protected]>
Changed-By: Alexandre Detiste <[email protected]>
Closes: 1083461
Changes:
lazr.uri (1.0.6-5) unstable; urgency=medium
.
* Team upload.
* Do not generate an extraneous dependency on python3-pkg-resources
(Closes: #1083461)
Checksums-Sha1:
fa3eb04ab1d3cebf1ba49d96acdf145b4aedb894 2364 lazr.uri_1.0.6-5.dsc
914ec927b95119e3bd079c4ce4b122a90b71b74f 8628 lazr.uri_1.0.6-5.debian.tar.xz
f31f876ff07a26240c33dbb00c039eb548a2fcaa 8075 lazr.uri_1.0.6-5_source.buildinfo
Checksums-Sha256:
6024262da23c9af1e1c1281ba73d62422eed1d4af243152a1aaadd7c6571db14 2364 lazr.uri_1.0.6-5.dsc
c2706fd1e6415f291e6e21e72302de17ff690ed0d6a10cffbb6ad499a4a3cc3b 8628 lazr.uri_1.0.6-5.debian.tar.xz
c7421b2f3eb8e052f7de8477159ea9e180b786d967a939efd42d5ba899c75b27 8075 lazr.uri_1.0.6-5_source.buildinfo
Files:
e5c9065c8c9bc638a4a62b96748eb882 2364 python optional lazr.uri_1.0.6-5.dsc
5eab468a40d9a7ebfcea437a3c00d186 8628 python optional lazr.uri_1.0.6-5.debian.tar.xz
f41572574f0aaa315a8d5d31baf961b9 8075 python optional lazr.uri_1.0.6-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=1RBA
-----END PGP SIGNATURE-----
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.