This proposal is great! PyPI security has been valued a lot these days. Glad we're also joining.
Best, Wei > On Jun 25, 2024, at 8:01 PM, Jarek Potiuk <ja...@potiuk.com> wrote: > > Yes and no :) > > We publish alpha/betas - yes. No change there. But for RCs what we publish > in SVN currently are the packages that are built fro RC tag but without rc > suffix - so that when they pass the voting we upload them to PyPI without > regenerating them (RC becomes final). > > But we do not publish the PYPI RCs - since PYPI uploads are immutable, we > need to publish PYPI RCs with the rc suffixes. So far we just generated > them and published to PyPI for testing but we did not upload them to SVN. > > > So if we want to pull RCs from SVN - we need to upload there both: the RC > version for PyPI (with RC suffix) and the no-suffix candidate that might > become the final version once voted. > > J --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@airflow.apache.org For additional commands, e-mail: dev-h...@airflow.apache.org
