Package: astropy Version: 0.4.1+dfsg-1 Tags: patch Seen while rebuilding this package in pbuilder:
Download error on https://pypi.python.org/simple/astropy-helpers/: [Errno 110] Connection timed out -- Some packages may not be found! This is a "feature" of astropy-helpers: it tries to autoupgrade itself to the latest version when run. I believe it is inappropriate for a Debian package since it introduces unpredictability into the build process. (The source code for the package is no longer entirely contained in the Debian archive.) Fortunately, there is a documented way to turn it off. Patch attached.
astropy_helpers (included in the source distribution) tries by default to update itself over the network. This can have a negative impact on the reproducibility of the build, to say nothing of privacy and security concerns. (Licensing would also be an issue if this were a GPL package.) This patch turns off the downloading and automatic upgrade features. If bug fixes are needed they should be incorporated explicitly by the package maintainer. --- a/setup.cfg +++ b/setup.cfg @@ -23,3 +23,5 @@ [ah_bootstrap] auto_use = True +auto_upgrade = False +download_if_needed = False
