Debian Bug report logs - #1084006
zope.configuration: (build-)depends on deprecated module python3-pkg-resources

version graph

Package: src:zope.configuration; Maintainer for src:zope.configuration is Debian Python Team <[email protected]>;

Reported by: Matthias Klose <[email protected]>

Date: Fri, 4 Oct 2024 09:53:48 UTC

Severity: normal

Tags: sid, trixie

Found in version zope.configuration/5.0.1-1

Full log

Message #15 received at [email protected] (full text, mbox, reply):

Received: (at 1084006) by bugs.debian.org; 5 Oct 2024 02:56:53 +0000
From [email protected] Sat Oct 05 02:56:53 2024
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
	(2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.3 required=4.0 tests=BAYES_00,FORGED_SPF_HELO,
	FROMDEVELOPER,LONGTO,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_NONE,
	SUSPICIOUS_RECIPS autolearn=no autolearn_force=no
	version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 29; hammy, 150; neutral, 98; spammy,
	0. spammytokens: hammytokens:0.000-+--trixie, 0.000-+--H*F:U*doko,
	0.000-+--H*RU:sk:einhorn, 0.000-+--H*r:sk:einhorn,
	0.000-+--H*r:[email protected]
Return-path: <[email protected]>
Received: from einhorn-mail.in-berlin.de ([217.197.80.20]:43575 helo=einhorn-mail-out.in-berlin.de)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1swuyT-009GAV-Av
	for [email protected]; Sat, 05 Oct 2024 02:56:53 +0000
X-Envelope-From: [email protected]
Received: from authenticated.user (localhost [127.0.0.1]) by einhorn.in-berlin.de  with ESMTPSA id 4952YulZ280453
        (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT);
	Sat, 5 Oct 2024 04:34:58 +0200
Message-ID: <[email protected]>
Date: Sat, 5 Oct 2024 04:34:54 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Migrating away from pkg_resources is difficult for namespace
 packages
To: Colin Watson <[email protected]>, [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected],
        [email protected], [email protected]
References: <[email protected]>
Content-Language: en-US
From: Matthias Klose <[email protected]>
In-Reply-To: <[email protected]>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Greylist: delayed 1309 seconds by postgrey-1.36 at buxtehude; Sat, 05 Oct 2024 02:56:53 UTC
X-CrossAssassin-Score: 12

On 04.10.24 12:22, Colin Watson wrote:
> While pkg_resources is indeed deprecated upstream, there's nothing that
> we can sensibly do about it at the Debian level in lazr.* or zope.*, and
> it's not even as clear as you might hope what to do upstream.  They all
> do something like this in an __init__.py (with unimportant variations):
> 
>    __import__('pkg_resources').declare_namespace(__name__)
> 
> As
> https://packaging.python.org/en/latest/guides/packaging-namespace-packages/#pkg-resources-style-namespace-packages
> says:
> 
>    If you are creating a new distribution within an existing namespace
>    package that uses this method then it’s recommended to continue using
>    this as the different methods are not cross-compatible and it’s not
>    advisable to try to migrate an existing package.
> 
> I know pkg_resources is deprecated for most other purposes, but even
> upstream currently advises here not to try to migrate in this case.
> Now, I know there've been some attempts to figure this out:
> https://github.com/pypa/sample-namespace-packages thinks a migration may
> be possible as long as developers are willing to accept some
> limitations.  But it's still a difficult migration and upstream hasn't
> really got going on it; for Zope, see
> https://github.com/zopefoundation/meta/issues/194.
> 
> Please can you reconsider, and not force this for Debian trixie?  I
> think we need to keep pkg_resources around for this use case until a
> good deal more work has been done on migrating away from it for
> namespace packages.

I don't want to force it.  the separation of this module into it's own 
module is a Debian specific change to avoid runtime dependencies on 
pkg_resources.  So you'll find a lot of hard-coded dependencies that are 
just not used anymore. That's what I want to catch for the trixie release.

Matthias

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 17:51:29 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.