Re: ANN: Django 1.0.1 released

2008-11-15 Thread James Bennett

On Sat, Nov 15, 2008 at 8:42 PM, James Bennett <[EMAIL PROTECTED]> wrote:
> 1. When I rolled the release last night, I did 'python manage.py
> sdist' to generate the package, then uploaded it to the
> djangoproject.com server.

(and obviously I meant 'setup.py sdist')



-- 
"Bureaucrat Conrad, you are technically correct -- the best kind of correct."

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



Re: ANN: Django 1.0.1 released

2008-11-15 Thread James Bennett

On Sat, Nov 15, 2008 at 7:48 AM, leonel <[EMAIL PROTECTED]> wrote:
> Ive downloaded the tar.gz from
> http://www.djangoproject.com/download/1.0.1/tarball/
>
> and the  md5sum does not match the md5sum from:
> http://media.djangoproject.com/pgp/Django-1.0.1-final.checksum.txt

OK, so here's what happened:

1. When I rolled the release last night, I did 'python manage.py
sdist' to generate the package, then uploaded it to the
djangoproject.com server.
2. I then made my fatal error, which was that I uploaded it to the
Cheese Shop via 'python setup.py sdist upload'.
3. And then I did the checksums and placed the signed file on djangoproject.com.

Astute readers will notice what I did not, namely that step 2
re-generated the package, resulting in a tarball whose constituent
files and directories have slightly different creation times than the
package from step 1. And as a result, the checksums of the package
generated in step 2 are different from the checksums of the package
generated in step 1 -- even though their unpacked contents are
identical -- because 'tar' stores information about creation time in
the resulting compressed file.

So I've replaced the package on djangoproject.com with the copy
generated in step 2 above, and we've verified that its contents and
its checksums match exactly.

Your friendly local release manager apologizes for the inconvenience,
and will now go find someplace to hang his head in shame.

-- 
"Bureaucrat Conrad, you are technically correct -- the best kind of correct."

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



Re: ANN: Django 1.0.1 released

2008-11-15 Thread James Bennett

On Sat, Nov 15, 2008 at 7:37 PM, Malcolm Tredinnick
<[EMAIL PROTECTED]> wrote:
> Yep, looks like something went wrong there. James is offline at the
> moment, but he'll fix it when he gets a chance. The security-aware user
> will avoid using the tarballs until they're fixed.

I'm looking into it.


-- 
"Bureaucrat Conrad, you are technically correct -- the best kind of correct."

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



Re: ANN: Django 1.0.1 released

2008-11-15 Thread Malcolm Tredinnick


On Sat, 2008-11-15 at 13:31 -0500, BraneSKS wrote:
> I am getting the same thing for the md5 sum. Downloaded through  
> Firefox 3.0.4 and Safari 3.1.2 on Mac OS X.5.5.

Yep, looks like something went wrong there. James is offline at the
moment, but he'll fix it when he gets a chance. The security-aware user
will avoid using the tarballs until they're fixed.

Regards,
Malcolm



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



Re: ANN: Django 1.0.1 released

2008-11-15 Thread BraneSKS

I am getting the same thing for the md5 sum. Downloaded through  
Firefox 3.0.4 and Safari 3.1.2 on Mac OS X.5.5.


On Nov 15, 2008, at 8:48 AM, leonel wrote:

>
> James Bennett wrote:
>> Tonight we've released Django 1.0.1, a bugfix release in the 1.0
>> series containing improvements and fixes since the 1.0 release. This
>> is a recommended upgrade for anyone currently running Django 1.0.
>>
>> The blog entry announcing the release is here:
>> http://www.djangoproject.com/weblog/2008/nov/15/101/
>>
>> And the release notes are here:
>> http://docs.djangoproject.com/en/dev/releases/1.0.1/
>>
>>
> Ive downloaded the tar.gz from
> http://www.djangoproject.com/download/1.0.1/tarball/
>
> and the  md5sum does not match the md5sum from:
> http://media.djangoproject.com/pgp/Django-1.0.1-final.checksum.txt
>
> This is what I get
>
> md5sum Django-1.0.1-final.tar.gz
> d93a2d30d06f98f5ffebcee08bca6623  Django-1.0.1-final.tar.gz
>
> Am I missing something ??
>
> Thank you
>
>
>
> >


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



Re: ANN: Django 1.0.1 released

2008-11-15 Thread leonel

James Bennett wrote:
> Tonight we've released Django 1.0.1, a bugfix release in the 1.0
> series containing improvements and fixes since the 1.0 release. This
> is a recommended upgrade for anyone currently running Django 1.0.
>
> The blog entry announcing the release is here:
> http://www.djangoproject.com/weblog/2008/nov/15/101/
>
> And the release notes are here:
> http://docs.djangoproject.com/en/dev/releases/1.0.1/
>
>   
Ive downloaded the tar.gz from
http://www.djangoproject.com/download/1.0.1/tarball/

and the  md5sum does not match the md5sum from:
http://media.djangoproject.com/pgp/Django-1.0.1-final.checksum.txt

This is what I get

md5sum Django-1.0.1-final.tar.gz
d93a2d30d06f98f5ffebcee08bca6623  Django-1.0.1-final.tar.gz

Am I missing something ??

Thank you



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---



ANN: Django 1.0.1 released

2008-11-14 Thread James Bennett

Tonight we've released Django 1.0.1, a bugfix release in the 1.0
series containing improvements and fixes since the 1.0 release. This
is a recommended upgrade for anyone currently running Django 1.0.

The blog entry announcing the release is here:
http://www.djangoproject.com/weblog/2008/nov/15/101/

And the release notes are here:
http://docs.djangoproject.com/en/dev/releases/1.0.1/

-- 
"Bureaucrat Conrad, you are technically correct -- the best kind of correct."

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~--~~~~--~~--~--~---