Release artifacts missing for 2.1.0

Bug #2028764 reported by David Runge
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
lazr.delegates
New
Undecided
Unassigned

Bug Description

Hi! I package this project for Arch Linux.

The current release on PyPI is 2.1.0, which unfortunately has no respective artifacts on launchpad.
Could you please add them?

Also, since PyPI just silently removed the OpenPGP signature files for existing releases, they broke our reproducibility and trust path [1].
Can you therefore please also attach a signature file for a release tarball, signed by either AC0A4FF12611B6FCCF01C111393587D97D86500B or 760D8F2C93E9CA8562E4A00E75D673C2DD1FB761?
This would allow us to use launchpad as trusted upstream going forward.

Thank you! :)

[1] https://archlinux.org/todo/fix-reproducibility-of-packages-broken-by-pypi-removing-signature-files/

Revision history for this message
Jürgen Gmach (jugmac00) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.