Hacktoberfest 2026:维护者为十月标记出来的 issue,仍然开放、适合新手。 浏览 Hacktoberfest issue

11.0.123 and 11.0.124 sdists on PyPI are corrupt (absolute symlink) - uninstallable by pip and uv; consider yank

未关闭
#2,815 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
2/5
预计耗时
1-3 小时
新手友好度
35/100
Issue 类型
缺陷
描述清晰度
描述清楚
活跃度
活跃
技术栈
python
领域
release

调研方向

Start by reviewing the issue’s comparison of the 11.0.x sdists and the reproduction showing that pip and uv cannot unpack versions 11.0.123 and 11.0.124. No code change appears necessary; confirm the affected releases and check the project’s PyPI release process. Done means both affected releases are yanked from PyPI.

由索引模型根据 Issue 内容生成。

描述

The PyPI sdists for openshift-python-wrapper 11.0.123 (2026-04-17) and 11.0.124 (2026-04-20) contain AGENTS.md as an absolute symlink pointing at a maintainer home path. Both pip and uv refuse to unpack it, which makes these two releases uninstallable.

Reproduction (uv):

$ uv pip install openshift-python-wrapper==11.0.124
error: Failed to download and build openshift-python-wrapper==11.0.124
  cause: Failed to extract archive
  cause: Invalid tar file
  cause: failed to unpack '.../AGENTS.md'
  cause: symlink path /home/<maintainer>/... is absolute, but external symlinks are not allowed

Reproduction (pip):

$ pip install openshift-python-wrapper==11.0.123
ERROR: Invalid member in the tar file .../openshift_python_wrapper-11.0.123.tar.gz:
'AGENTS.md' is a link to an absolute path

Scope (verified by downloading and inspecting every 11.0.x sdist on PyPI):

  • 11.0.122 (2026-04-08): clean
  • 11.0.123 (2026-04-17): corrupt
  • 11.0.124 (2026-04-20): corrupt
  • 11.0.125 ... 11.0.141 (latest): all clean

The repository's AGENTS.md is a regular file today. The symlink was committed on 2026-04-12 (d71149a76a) and removed in the 2026-07-09 docs restructure (54468997b1), which matches the two affected builds falling inside that window.

Why this matters: the releases are not merely stale, they are uninstallable. Resolvers that backtrack onto 11.0.123/11.0.124 (e.g. uv under version constraints or exclude-newer windows, particularly on less common platforms) fail with a misleading tar error instead of cleanly skipping the version.

Suggested action: yank 11.0.123 and 11.0.124 from PyPI. No code change appears to be needed; current source and all other releases are clean.

主要语言
Python
星标
27
派生
82
平均合并
1 天 11 小时
30 天内合并 PR
12

环境准备

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

RedHatQE/openshift-python-wrapper 的其他 Issue

查看 RedHatQE/openshift-python-wrapper 的全部 Issue

相似的 Issue

更多 Python Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。