GNU bug report logs - #54737
gnu: python-multipart: Update to 0.2.4.

Previous Next

Package: guix-patches;

Reported by: Peter Polidoro <peter <at> polidoro.io>

Date: Tue, 5 Apr 2022 19:37:02 UTC

Severity: normal

Done: "(" <paren <at> disroot.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 54737 in the body.
You can then email your comments to 54737 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#54737; Package guix-patches. (Tue, 05 Apr 2022 19:37:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Peter Polidoro <peter <at> polidoro.io>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Tue, 05 Apr 2022 19:37:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Peter Polidoro <peter <at> polidoro.io>
To: guix-patches <at> gnu.org
Subject: gnu: python-multipart: Update to 0.2.4.
Date: Tue, 05 Apr 2022 15:34:05 -0400
[0001-gnu-python-multipart-Update-to-0.2.4.patch (text/x-diff, attachment)]
From ac80ae77c153ac8d39fa70ceacb6adf332e6f7bf Mon Sep 17 00:00:00 2001
From: Peter Polidoro <peter <at> polidoro.io>
Date: Tue, 5 Apr 2022 15:33:07 -0400
Subject: [PATCH] gnu: python-multipart: Update to 0.2.4.

* gnu/packages/python-xyz.scm (python-multipart): Update to 0.2.4.
---
 gnu/packages/python-xyz.scm | 33 +++++++++++----------------------
 1 file changed, 11 insertions(+), 22 deletions(-)

diff --git a/gnu/packages/python-xyz.scm b/gnu/packages/python-xyz.scm
index 30cab6a113..fd25d3b62e 100644
--- a/gnu/packages/python-xyz.scm
+++ b/gnu/packages/python-xyz.scm
@@ -29320,29 +29320,18 @@ (define-public python-stltools
 (define-public python-multipart
   (package
     (name "python-multipart")
-    (version "0.0.5")
-    (source (origin
-              (method url-fetch)
-              (uri (pypi-uri "python-multipart" version))
-              (sha256
-               (base32
-                "0hzshd665rl1bkwvaj9va4j3gs8nmb478fbvligx20663xhmzfzp"))))
+    (version "0.2.4")
+    (source
+      (origin
+        (method url-fetch)
+        (uri (pypi-uri "multipart" version))
+        (sha256
+          (base32 "1jr24lm931pkh4x0amr19w5qknrckcg4z3k1zvz9cw5wc19j1fh6"))))
     (build-system python-build-system)
-    (propagated-inputs (list python-six))
-    (native-inputs (list python-pyyaml python-mock python-pytest-cov))
-    (arguments
-     `(#:phases (modify-phases %standard-phases
-                  ;; There is a bug in the test_suit specification.
-                  (add-after 'unpack 'patch-test-suite
-                    (lambda _
-                      (substitute* "setup.py"
-                        (("test_suite = 'multipart.tests.suite'")
-                         "test_suite = 'multipart.tests.test_multipart.suite'")))))))
-    (home-page "https://github.com/andrew-d/python-multipart")
-    (synopsis "Streaming multipart parser for Python")
-    (description
-     "This package provides a streaming multipart parser for Python.")
-    (license license:asl2.0)))
+    (home-page "http://github.com/defnull/multipart")
+    (synopsis "Parser for multipart/form-data.")
+    (description "Parser for multipart/form-data.")
+    (license license:expat)))
 
 (define-public python-aiopg
   (package
-- 
2.35.1





Information forwarded to guix-patches <at> gnu.org:
bug#54737; Package guix-patches. (Fri, 29 Jul 2022 19:39:02 GMT) Full text and rfc822 format available.

Message #8 received at 54737 <at> debbugs.gnu.org (full text, mbox):

From: Maxime Devos <maximedevos <at> telenet.be>
To: Peter Polidoro <peter <at> polidoro.io>, 54737 <at> debbugs.gnu.org
Subject: Re: [bug#54737] gnu: python-multipart: Update to 0.2.4.
Date: Fri, 29 Jul 2022 21:38:04 +0200
[Message part 1 (text/plain, inline)]
>  (define-public python-multipart
>    (package
>      (name "python-multipart")
> -    (version "0.0.5")
> -    (source (origin
> -              (method url-fetch)
> -              (uri (pypi-uri "python-multipart" version))
> -              (sha256
> -               (base32
> - "0hzshd665rl1bkwvaj9va4j3gs8nmb478fbvligx20663xhmzfzp"))))
> +    (version "0.2.4")
> +    (source
> +      (origin
> +        (method url-fetch)
> +        (uri (pypi-uri "multipart" version))
> +        (sha256
> +          (base32 
> "1jr24lm931pkh4x0amr19w5qknrckcg4z3k1zvz9cw5wc19j1fh6"))))

What's the reason for changing from the python-multipart to multipart? 
I've looked at the home page and the pypi page, and it doesn't state 
that the latter is a successor of the former, so these look like 
unrelated projects or a typosquatting attack.

Greetings,
Maxime.
[OpenPGP_0x49E3EE22191725EE.asc (application/pgp-keys, attachment)]
[OpenPGP_signature (application/pgp-signature, attachment)]

Information forwarded to guix-patches <at> gnu.org:
bug#54737; Package guix-patches. (Sat, 30 Jul 2022 12:20:01 GMT) Full text and rfc822 format available.

Message #11 received at 54737 <at> debbugs.gnu.org (full text, mbox):

From: Peter Polidoro <peter <at> polidoro.io>
To: Maxime Devos <maximedevos <at> telenet.be>
Cc: 54737 <at> debbugs.gnu.org
Subject: Re: [bug#54737] gnu: python-multipart: Update to 0.2.4.
Date: Sat, 30 Jul 2022 08:19:01 -0400
[Message part 1 (text/plain, inline)]
Hi. Good catch. I may have made a mistake when choosing between these two unfortunately named pypi packages. I need one of these two as a dependency for another Guix package. I am traveling at the moment, but I will double check this when I return in a few days. If I do need multipart instead of python-multipart, perhaps there is a better way to name the Guix packages to cause less confusion. Thanks!

> On Jul 29, 2022, at 3:38 PM, Maxime Devos <maximedevos <at> telenet.be> wrote:
> 
> 
>> 
>>  (define-public python-multipart
>>    (package
>>      (name "python-multipart")
>> -    (version "0.0.5")
>> -    (source (origin
>> -              (method url-fetch)
>> -              (uri (pypi-uri "python-multipart" version))
>> -              (sha256
>> -               (base32
>> - "0hzshd665rl1bkwvaj9va4j3gs8nmb478fbvligx20663xhmzfzp"))))
>> +    (version "0.2.4")
>> +    (source
>> +      (origin
>> +        (method url-fetch)
>> +        (uri (pypi-uri "multipart" version))
>> +        (sha256
>> +          (base32 "1jr24lm931pkh4x0amr19w5qknrckcg4z3k1zvz9cw5wc19j1fh6"))))
> 
> What's the reason for changing from the python-multipart to multipart? I've looked at the home page and the pypi page, and it doesn't state that the latter is a successor of the former, so these look like unrelated projects or a typosquatting attack.
> 
> Greetings,
> Maxime.
[OpenPGP_0x49E3EE22191725EE.asc (application/octet-stream, attachment)]
[OpenPGP_signature (application/octet-stream, attachment)]

Information forwarded to guix-patches <at> gnu.org:
bug#54737; Package guix-patches. (Mon, 01 Aug 2022 17:43:02 GMT) Full text and rfc822 format available.

Message #14 received at 54737 <at> debbugs.gnu.org (full text, mbox):

From: Peter Polidoro <peter <at> polidoro.io>
To: Maxime Devos <maximedevos <at> telenet.be>
Cc: 54737 <at> debbugs.gnu.org
Subject: Re: [bug#54737] gnu: python-multipart: Update to 0.2.4.
Date: Mon, 01 Aug 2022 13:35:35 -0400
I looked at my notes and found that this was indeed a mistake. I 
need the python-multipart pypi package, not the multipart pypi 
package.

You can close this, thank you for catching my error. I apologize 
for the confusion and for your time.

Peter Polidoro <peter <at> polidoro.io> writes:

> [1. text/plain]
> Hi. Good catch. I may have made a mistake when choosing between 
> these two
> unfortunately named pypi packages. I need one of these two as a 
> dependency for
> another Guix package. I am traveling at the moment, but I will 
> double check this
> when I return in a few days. If I do need multipart instead of 
> python-multipart,
> perhaps there is a better way to name the Guix packages to cause 
> less confusion.
> Thanks!
>
>> On Jul 29, 2022, at 3:38 PM, Maxime Devos 
>> <maximedevos <at> telenet.be> wrote:
>> 
>> 
>>> 
>>>  (define-public python-multipart
>>>    (package
>>>      (name "python-multipart")
>>> -    (version "0.0.5")
>>> -    (source (origin
>>> -              (method url-fetch)
>>> -              (uri (pypi-uri "python-multipart" version))
>>> -              (sha256
>>> -               (base32
>>> - "0hzshd665rl1bkwvaj9va4j3gs8nmb478fbvligx20663xhmzfzp"))))
>>> +    (version "0.2.4")
>>> +    (source
>>> +      (origin
>>> +        (method url-fetch)
>>> +        (uri (pypi-uri "multipart" version))
>>> +        (sha256
>>> +          (base32 
>>> "1jr24lm931pkh4x0amr19w5qknrckcg4z3k1zvz9cw5wc19j1fh6"))))
>> 
>> What's the reason for changing from the python-multipart to 
>> multipart? I've
>> looked at the home page and the pypi page, and it doesn't state 
>> that the
>> latter is a successor of the former, so these look like 
>> unrelated projects or
>> a typosquatting attack.
>> 
>> Greetings,
>> Maxime.
>
> [2. application/pgp-keys; OpenPGP_0x49E3EE22191725EE.asc]...
>
> [3. application/octet-stream; OpenPGP_signature]...





Information forwarded to guix-patches <at> gnu.org:
bug#54737; Package guix-patches. (Mon, 01 Aug 2022 18:00:02 GMT) Full text and rfc822 format available.

Message #17 received at 54737 <at> debbugs.gnu.org (full text, mbox):

From: "(" <paren <at> disroot.org>
To: "Peter Polidoro" <peter <at> polidoro.io>, "Maxime Devos"
 <maximedevos <at> telenet.be>
Cc: 54737 <at> debbugs.gnu.org
Subject: Re: [bug#54737] gnu: python-multipart: Update to 0.2.4.
Date: Mon, 01 Aug 2022 18:59:23 +0100
On Mon Aug 1, 2022 at 6:35 PM BST, Peter Polidoro wrote:
> You can close this, thank you for catching my error. I apologize 
> for the confusion and for your time.
Anyone can close an issue; you just send an email to control <at> debbugs.gnu.org
with the following contents:

```
close ISSUE_NUMBER
```

    -- (




bug closed, send any further explanations to 54737 <at> debbugs.gnu.org and Peter Polidoro <peter <at> polidoro.io> Request was from "(" <paren <at> disroot.org> to control <at> debbugs.gnu.org. (Mon, 01 Aug 2022 18:01:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Tue, 30 Aug 2022 11:24:06 GMT) Full text and rfc822 format available.

This bug report was last modified 1 year and 211 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.