11.0.123 and 11.0.124 sdists on PyPI are corrupt (absolute symlink) - uninstallable by pip and uv; consider yank
Maintainer antworten meist innerhalb von 1 Tag
Dieses Issue hat noch niemand übernommen.
Bewertung
- Schwierigkeit
- 2/5
- Geschätzter Aufwand
- 1-3 Stunden
- Anfängerfreundlichkeit
- 35/100
Rechercherichtung
Start by reviewing the issue’s comparison of the 11.0.x sdists and the reproduction showing that pip and uv cannot unpack versions 11.0.123 and 11.0.124. No code change appears necessary; confirm the affected releases and check the project’s PyPI release process. Done means both affected releases are yanked from PyPI.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Beschreibung
The PyPI sdists for openshift-python-wrapper 11.0.123 (2026-04-17) and 11.0.124 (2026-04-20) contain AGENTS.md as an absolute symlink pointing at a maintainer home path. Both pip and uv refuse to unpack it, which makes these two releases uninstallable.
Reproduction (uv):
$ uv pip install openshift-python-wrapper==11.0.124
error: Failed to download and build openshift-python-wrapper==11.0.124
cause: Failed to extract archive
cause: Invalid tar file
cause: failed to unpack '.../AGENTS.md'
cause: symlink path /home/<maintainer>/... is absolute, but external symlinks are not allowed
Reproduction (pip):
$ pip install openshift-python-wrapper==11.0.123
ERROR: Invalid member in the tar file .../openshift_python_wrapper-11.0.123.tar.gz:
'AGENTS.md' is a link to an absolute path
Scope (verified by downloading and inspecting every 11.0.x sdist on PyPI):
- 11.0.122 (2026-04-08): clean
- 11.0.123 (2026-04-17): corrupt
- 11.0.124 (2026-04-20): corrupt
- 11.0.125 ... 11.0.141 (latest): all clean
The repository's AGENTS.md is a regular file today. The symlink was committed on 2026-04-12 (d71149a76a) and removed in the 2026-07-09 docs restructure (54468997b1), which matches the two affected builds falling inside that window.
Why this matters: the releases are not merely stale, they are uninstallable. Resolvers that backtrack onto 11.0.123/11.0.124 (e.g. uv under version constraints or exclude-newer windows, particularly on less common platforms) fail with a misleading tar error instead of cleanly skipping the version.
Suggested action: yank 11.0.123 and 11.0.124 from PyPI. No code change appears to be needed; current source and all other releases are clean.
- Vorherrschende Sprache
- Python
- Sterne
- 27
- Forks
- 82
- Ø Merge
- 1 T. 11 Std.
- Gemergte PRs (30 T.)
- 12
Entwicklungsumgebung
- Kein Dockerfile und keine Docker-Compose-Datei
- Hat eine Pull-Request-Vorlage
- Beitragsleitfaden lesen
Erste Schritte
- Lesen Sie das ganze Issue und danach den Beitragsleitfaden des Projekts.
- Schreiben Sie ins Issue, dass Sie es übernehmen — das erspart doppelte Arbeit.
- Forken Sie das Repository und arbeiten Sie in einem Branch.
- Öffnen Sie einen Pull Request, der die Issue-Nummer nennt.
Mehr aus RedHatQE/openshift-python-wrapper
-
Stale
Schwierigkeit 2/5 1-3 Stunden Anfängerfreundlichkeit 75/100
RedHatQE/openshift-python-wrapper#2804 · 3 Kommentare ·
Maintainer antworten meist innerhalb von 1 Tag
-
Dependency DashboardOffenStale
Schwierigkeit 4/5 3-5 Tage Anfängerfreundlichkeit 15/100
RedHatQE/openshift-python-wrapper#2180 · 125 Kommentare ·
Maintainer antworten meist innerhalb von 1 Tag
Alle Issues in RedHatQE/openshift-python-wrapper
Ähnliche Issues
-
Schwierigkeit 1/5 Unter einer Stunde Anfängerfreundlichkeit 92/100
-
Harmony OPeNDAP SubSetter (HOSS) Geographic LARC_CLOUD PREFIRE_SAT2_AUX-SAT R01 production
Schwierigkeit 2/5 1-3 Stunden Anfängerfreundlichkeit 68/100
nasa/harmony-autotester#245 ·
-
enhancement
Schwierigkeit 2/5 1-3 Stunden Anfängerfreundlichkeit 68/100
Deltares/imod-python#1928 ·
-
Schwierigkeit 1/5 Unter einer Stunde Anfängerfreundlichkeit 88/100
Maintainer antworten meist innerhalb von 1 Tag
-
feature
Schwierigkeit 2/5 1-3 Stunden Anfängerfreundlichkeit 66/100