Hi, We are talking here about runtime dependency only.
Older dh-python was translating a runtime dependency on "setuptools" as found in pyprojet.toml / setup.py / setup.cfg into a python3-pkg-resources runtime dependency. Recently this little override has been removed and a _runtime_ dependency on python3-setuptools is created. Many upstream are wrong here and need a patch. BTW I was recently assigned the creation of hundreds of certificates for edge server on private network and thus have a renewed interrest in Let's Encrypt and would like to join the team to help with all these python transitions that create a lot of churn. Greetings Alexandre Le mar. 27 janv. 2026, 17:55, Didier 'OdyX' Raboud <[email protected]> a écrit : > Hello there, > > thanks for the report. To be precise, src:python3-certbot-dns-desec > depends > *transitively* on python3-pkg-resources, via it's build-dependency on > python3-setuptools. I would suggest for this information to be made > precise in > other similar reports. > > I'll look into trying to fix this. > > Best, > OdyX > > On Sun, 18 Jan 2026 13:45:40 +0100 [email protected] wrote: > > Package: python3-certbot-dns-desec > > Severity: serious > > Tags: sid forky > > User: [email protected] > > Usertags: pkg-resources-deprecation > > > > [This bug is targeted to the upcoming forky release] > > > > The package build-depends or depends on python3-pkg-resources, which > > is deprecated upstream. Details can be found at > > > > https://setuptools.pypa.io/en/latest/pkg_resources.html > > > > Use of pkg_resources is deprecated in favor of importlib.resources > > and importlib.metadata. Some useful APIs are also provided by > > packaging (e.g. requirements and version parsing). Users should > > refrain from new usage of pkg_resources and should work to port to > > importlib-based solutions. > > > > Python 3.13 in unstable provides both importlib.resources and > > importlib.metadata, so no additional dependencies on those packages > > are needed. > > > > If the package is a namespace package, then please lower the severity > > again to normal. > > > > >
