11.0.123 and 11.0.124 sdists on PyPI are corrupt (absolute symlink) - uninstallable by pip and uv; consider yank
維護者通常 1 天內回覆
還沒有人認領這個 Issue。
評估
研究方向
Start by reviewing the issue’s comparison of the 11.0.x sdists and the reproduction showing that pip and uv cannot unpack versions 11.0.123 and 11.0.124. No code change appears necessary; confirm the affected releases and check the project’s PyPI release process. Done means both affected releases are yanked from PyPI.
由索引模型根據 Issue 內容生成。
描述
The PyPI sdists for openshift-python-wrapper 11.0.123 (2026-04-17) and 11.0.124 (2026-04-20) contain AGENTS.md as an absolute symlink pointing at a maintainer home path. Both pip and uv refuse to unpack it, which makes these two releases uninstallable.
Reproduction (uv):
$ uv pip install openshift-python-wrapper==11.0.124
error: Failed to download and build openshift-python-wrapper==11.0.124
cause: Failed to extract archive
cause: Invalid tar file
cause: failed to unpack '.../AGENTS.md'
cause: symlink path /home/<maintainer>/... is absolute, but external symlinks are not allowed
Reproduction (pip):
$ pip install openshift-python-wrapper==11.0.123
ERROR: Invalid member in the tar file .../openshift_python_wrapper-11.0.123.tar.gz:
'AGENTS.md' is a link to an absolute path
Scope (verified by downloading and inspecting every 11.0.x sdist on PyPI):
- 11.0.122 (2026-04-08): clean
- 11.0.123 (2026-04-17): corrupt
- 11.0.124 (2026-04-20): corrupt
- 11.0.125 ... 11.0.141 (latest): all clean
The repository's AGENTS.md is a regular file today. The symlink was committed on 2026-04-12 (d71149a76a) and removed in the 2026-07-09 docs restructure (54468997b1), which matches the two affected builds falling inside that window.
Why this matters: the releases are not merely stale, they are uninstallable. Resolvers that backtrack onto 11.0.123/11.0.124 (e.g. uv under version constraints or exclude-newer windows, particularly on less common platforms) fail with a misleading tar error instead of cleanly skipping the version.
Suggested action: yank 11.0.123 and 11.0.124 from PyPI. No code change appears to be needed; current source and all other releases are clean.
- 主要語言
- Python
- 星號
- 27
- 分支
- 84
- 平均合併
- 1 天 16 小時
- 30 天內合併 PR
- 13
環境準備
- 沒有 Dockerfile 或 Docker Compose 檔案
- 有 Pull Request 範本
- 閱讀貢獻指南
從這裡開始
- 先讀完整個 Issue，再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫，在一個分支上完成修改。
- 送出 Pull Request，並在描述裡引用這個 Issue 編號。
RedHatQE/openshift-python-wrapper 的其他 Issue
-
Stale
難度 4/5 3-5 天 新手友好度 15/100
RedHatQE/openshift-python-wrapper#2180 · 125 則留言 ·
維護者通常 1 天內回覆
查看 RedHatQE/openshift-python-wrapper 的全部 Issue
相似的 Issue
-
難度 2/5 1-3 小時 新手友好度 78/100
btclib-org/btclib-wallet#587 · 1 則留言 ·
維護者通常 1 天內回覆
-
documentation
難度 2/5 1-3 小時 新手友好度 68/100
Judgment-Pack/judgment-pack-spec#275 ·
維護者通常 1 天內回覆
-
ai-generated
難度 2/5 1-3 小時 新手友好度 77/100
維護者通常 1 天內回覆
-
documentation good first issue priority: low size: XS
難度 1/5 1-3 小時 新手友好度 92/100
yeongseon/azure-functions-doctor-python#651 ·
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 65/100
Changaco/python-libarchive-c#146 ·