Releases to pypi.org fail because of a direct dep (zaza)

Bug #1928938 reported by Alvaro Uria
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju-verify
Fix Released
Medium
Robert Gildein

Bug Description

When doing the following, PyPI denies the upload because of direct dependencies (zaza, zaza-openstack):

$ make release
$ twine upload dist/*
Uploading distributions to https://upload.pypi.org/legacy/
Uploading juju_verify-0.1-py3-none-any.whl
100%|███| 44.1k/44.1k [00:01<00:00, 39.7kB/s]
NOTE: Try --verbose to see response content.
HTTPError: 400 Bad Request from https://upload.pypi.org/legacy/
Invalid value for requires_dist. Error: Can't have direct dependency: "zaza @ git+https://github.com/openstack-charmers/zaza.git#egg=zaza ; extra == 'dev'"

This issue was also reported here:
https://github.com/pypa/pip/issues/6301

Note: There are no pip packages for those 2 libraries.

Related branches

Alvaro Uria (aluria)
Changed in juju-verify:
status: New → Triaged
importance: Undecided → Medium
Changed in juju-verify:
assignee: nobody → Robert Gildein (rgildein)
status: Triaged → In Progress
Revision history for this message
Robert Gildein (rgildein) wrote :

After a long search, I found the following four options:
  - define dependencies in tox.ini
  - create a post install function in setup.py [1]
  - exclude extra_requires in setup.py [2]
  - ask the OpenStack team to release zaza on pypi

I think the best approach would be to use the tox.ini for extra dependencies or exclude extra_requires.

---
[1]: https://pastebin.ubuntu.com/p/sp5YG7ZZrX/
[2]: https://pastebin.ubuntu.com/p/Xvm3rGsX9v/

Revision history for this message
Robert Gildein (rgildein) wrote :
Alvaro Uria (aluria)
Changed in juju-verify:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.