[Distutils] Outstanding questions for PEP 541: Package Index Name Retention

2017-11-29 Thread Sumana Harihareswara
.html [7] https://mail.python.org/pipermail/distutils-sig/2017-January/030009.html [8] https://mail.python.org/pipermail/distutils-sig/2017-January/030008.html [9] https://mail.python.org/pipermail/distutils-sig/2017-January/030005.html -- Sumana Harihareswara Changeset Consulting https:/

Re: [Distutils] Immutability of Release Metadata in Warehouse

2017-12-19 Thread Sumana Harihareswara
On 12/19/2017 03:00 PM, Sumana Harihareswara wrote: > * supporting Markdown https://github.com/pypa/warehouse/issues/2206 Whoops: https://github.com/pypa/warehouse/issues/869 is the right link. -- Sumana Harihareswara Changeset Consulting https://changeset.

Re: [Distutils] Immutability of Release Metadata in Warehouse

2017-12-19 Thread Sumana Harihareswara
/pypa/warehouse/issues/726 * supporting Markdown https://github.com/pypa/warehouse/issues/2206 * advising packagers to run `python setup.py check -r -s` https://github.com/pypa/python-packaging-user-guide/issues/210 -- Sumana Harihareswara Changeset Consulting https://changeset.nyc __

Re: [Distutils] Immutability of Release Metadata in Warehouse

2017-12-19 Thread Sumana Harihareswara
/issues/210 -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.python.org/mailman/listinfo/distutils-sig

[Distutils] Update on Warehouse kickoff and milestones

2017-12-07 Thread Sumana Harihareswara
d * Dustin Ingram, backend * Ernest W. Durbin III, backend * Laura Hampton, project management, testing, documentation * Nicole Harris, frontend and design * Sumana Harihareswara, project management, product management, testing, documentation None of us are working 40 hours/week on this but the si

[Distutils] Re: Packaging/Warehouse sprint at PyCon 2018

2018-05-08 Thread Sumana Harihareswara
, which will probably have the most discussion. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc On 05/01/2018 05:29 PM, Sumana Harihareswara wrote: > https://wiki.python.org/psf/PackagingSprints now has more info: > > * we'll have at least one Open Space/Birds of

[Distutils] proposing Python package index upload API spec (potential PEP)

2018-05-08 Thread Sumana Harihareswara
d get PEP accepted by BDFL-Delegate 6. coordinate with PyPA, maintainers of `distutils`, maintainers of packaging and distribution tools, and documentation maintainers to implement PEP compliance Thoughts are welcome. I originally posted this at https://github.com/pypa/packaging-problems/issues/128

[Distutils] EuroPython financial aid deadline: 5 June

2018-06-03 Thread Sumana Harihareswara
tickets, travel costs, and accommodation. Apply by 5 June: https://ep2018.europython.eu/en/registration/financial-aid/ (I'm not involved in organizing EuroPython -- just signal-boosting.) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list

[Distutils] Re: Packaging/Warehouse sprint at PyCon 2018

2018-05-01 Thread Sumana Harihareswara
e'll work on Happy to take suggestions on things to talk about and work on during the BoF and sprints! -Sumana On 03/13/2018 10:04 AM, Sumana Harihareswara wrote: > https://wiki.python.org/psf/PackagingSprints is where I've started a > list of our upcoming planned sprints (right now, P

[Distutils] (Final) PyPI/Warehouse weekly report: legacy is shut down

2018-05-01 Thread Sumana Harihareswara
fore the project. We're all grateful we got to work together and make this happen, and hope to have further paid opportunities to dedicate time to this infrastructure and its symbiotic community. -- Sumana Harihareswara (basically my last note as) Warehouse/PyPI project manager PyPA member Packag

[Distutils] Oct 27-28: Bloomberg sponsoring packaging sprint

2018-05-02 Thread Sumana Harihareswara
to Mario and to Paul Ganssle for suggesting it! -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list distutils-sig@python.org https://mail.python.org/mm3/mailman3/lists/distutils-sig.python.org/ Message archived at https://mail.python.org/mm3/archives/list

[Distutils] Fwd: [pypi-announce] legacy.pypi.org shut down, please use pypi.org

2018-04-30 Thread Sumana Harihareswara
Roadmap's updated https://wiki.python.org/psf/WarehouseRoadmap . We'd love your help for the next chapter, the post-legacy-shutdown tasks: https://github.com/pypa/warehouse/milestone/12 -- Sumana Harihareswara PyPI/Warehouse project manager Changeset Consulting https://changeset.nyc

[Distutils] Fwd: Warehouse update: recent progress

2018-01-15 Thread Sumana Harihareswara
Forwarding from pypa-dev. Forwarded Message Subject: Warehouse update: recent progress Date: Mon, 15 Jan 2018 22:32:45 -0500 From: Sumana Harihareswara <s...@changeset.nyc> To: pypa-...@googlegroups.com Happy new year! After the late-December holiday season, the War

[Distutils] Packaging/Warehouse sprint at PyCon 2018

2018-01-30 Thread Sumana Harihareswara
on in Cleveland. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.python.org/mailman/listinfo/distutils-sig

[Distutils] Fwd: Warehouse update: Estimate for 1st milestone, new announce list

2018-01-30 Thread Sumana Harihareswara
: Sumana Harihareswara <s...@changeset.nyc> To: pypa-...@googlegroups.com The big news in Warehouse world is that we tentatively believe we can get our first milestone[0] out by the end of February. So around then you can expect emails and other announcements asking package maintainers to test py

[Distutils] Fwd: Warehouse update: still on track, new features

2018-02-06 Thread Sumana Harihareswara
Our weekly Warehouse update just went out to pypa-dev and is included below. Forwarded Message Subject: Warehouse update: still on track, new features Date: Tue, 6 Feb 2018 22:09:12 -0500 From: Sumana Harihareswara <s...@changeset.nyc> To: pypa-dev <pypa-...@googleg

Re: [Distutils] Packaging/Warehouse sprint at PyCon 2018

2018-02-13 Thread Sumana Harihareswara
you'll apply for financial assistance. On 01/30/2018 01:39 PM, Sumana Harihareswara wrote: > In case you're planning your PyCon Cleveland travel: we are planning to > hold a Warehouse/packaging sprint at PyCon (the sprints are Monday, May > 14th - Thursday, May 17th 2018). > > We

[Distutils] Fwd: Warehouse: package manager features & question about advertising

2018-02-13 Thread Sumana Harihareswara
Forwarded from pypa-dev https://groups.google.com/forum/#!topic/pypa-dev/xQb5RvDb5rc - the weekly Warehouse update. Forwarded Message Subject: Warehouse: package manager features & question about advertising Date: Tue, 13 Feb 2018 23:15:10 -0500 From: Sumana Harihareswar

[Distutils] Fwd: Warehouse: essential maintainer features & next steps

2018-02-21 Thread Sumana Harihareswara
Forwarding from pypa-dev. Forwarded Message Subject: Warehouse: essential maintainer features & next steps Date: Wed, 21 Feb 2018 16:29:31 -0500 From: Sumana Harihareswara <s...@changeset.nyc> To: pypa-dev <pypa-...@googlegroups.com> The big Warehouse

[Distutils] Warehouse update: highest priority tasks

2017-12-20 Thread Sumana Harihareswara
Cross-posting from pypa-dev https://groups.google.com/forum/#!topic/pypa-dev/2hulwNQFhRk . I'm realizing that pypa-dev might be a better place to send updates like this than distutils-sig and would appreciate feedback on that question (probably off-list is better). -Sumana Harihareswara

[Distutils]Package maintainers: verify your PyPI account email address

2018-07-16 Thread Sumana Harihareswara
pload a file: https://github.com/pypa/warehouse/pull/4292 Please forward to other package maintainers. After we iron out any issues I figure we'll email the announce list https://mail.python.org/mm3/mailman3/lists/pypi-announce.python.org/ . -- Sumana Harihareswara Changeset Consulting htt

[Distutils] Fwd: Warehouse update: role management & welcoming first-time contributors

2018-01-23 Thread Sumana Harihareswara
Forwarding from pypa-dev <https://groups.google.com/forum/#!topic/pypa-dev/f7VZ_gh5Je0>. Forwarded Message Subject: Warehouse update: role management & welcoming first-time contributors Date: Tue, 23 Jan 2018 22:33:46 -0500 From: Sumana Harihareswara <s...@

[Distutils] barriers to Warehouse contribution

2018-01-16 Thread Sumana Harihareswara
on pypa-dev to keep it in one place (that list tends to get ~15 posts/month), but if you aren't subscribed there and don't want to be, go ahead & reply here. :) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG mail

[Distutils] Twine 1.10.0 release

2018-03-07 Thread Sumana Harihareswara
, and other help. Please do `pip install -U twine` at your earliest convenience, speak up if you see bugs, and leave a thumbs-up at https://github.com/pypa/twine/pull/317 if you want to indicate that it works just fine for you. :) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc On 03

[Distutils] Fwd: PyPI & Warehouse update: redirecting & shutting down legacy by end of April

2018-03-07 Thread Sumana Harihareswara
Forwarding from pypa-dev (archived https://groups.google.com/forum/#!topic/pypa-dev/L9sF30_Yr2A ). -- Sumana Harihareswara - Original message - From: Sumana Harihareswara <s...@changeset.nyc> To: "pypa-dev" <pypa-...@googlegroups.com> Subject: PyPI & War

[Distutils] Warehouse update: a week of testing, polish, & infrastructure

2018-02-27 Thread Sumana Harihareswara
ues/3062 [20] https://github.com/pypa/warehouse/issues/2794 [21] https://github.com/pypa/warehouse/issues/2285 [22] https://github.com/pypa/warehouse/projects/1 [23] https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html [24] https://blog.mozilla.org/blog/2018/01/23/moss-q4-support

Re: [Distutils] Packaging/Warehouse sprint at PyCon 2018

2018-03-13 Thread Sumana Harihareswara
roadmap * Packaging Problems triage * PyPI API keys and two-factor auth, with Luke Sneeringer & Donald Stufft * Architecture for new Warehouse API URL structure -Sumana On 02/13/2018 11:22 PM, Sumana Harihareswara wrote: > Reminder: this Thursday, Feb. 15th, is the last day to request fi

[Distutils] new stuff overview, beta next week, user tests, & other Warehouse updates

2018-03-14 Thread Sumana Harihareswara
around on code review. *Thanks to Mozilla Open Source Support[29] for their funding[30] for the PyPI & Warehouse work.* -- Sumana Harihareswara Warehouse project manager Changeset Consulting s...@changeset.nyc P.S. Usually I compose these weekly report emails in plain text; here I'm doing it

Re: [Distutils] new stuff overview, beta next week, user tests, & other Warehouse updates

2018-03-14 Thread Sumana Harihareswara
On 03/14/2018 03:29 AM, Nathaniel Smith wrote: > On Tue, Mar 13, 2018 at 11:39 PM, Sumana Harihareswara <s...@changeset.nyc> > wrote: >> I've started preparing a >> draft overview of what's new in PyPI/packaging/distribution to publicize >> along with the beta;

Re: [Distutils] IRC/Twitter livechats about Warehouse today & Thursday

2018-04-04 Thread Sumana Harihareswara
The next chat will be in a little under half a day. We're also adding one more IRC livechat, for next week: Tuesday, April 10th, 19:00 UTC: https://www.timeanddate.com/worldclock/converter.html?iso=20180410T19=24=1440=179 . -Sumana On 04/03/2018 10:44 AM, Sumana Harihareswara wrote

Re: [Distutils] please mark good first issues in your projects

2018-04-13 Thread Sumana Harihareswara
spitality in Bug Tracking", etc. -- are at my resources page https://changeset.nyc/resources.html .) -- Sumana Harihareswara Warehouse project manager Changeset Consulting https://changeset.nyc On 04/13/2018 11:32 AM, C Anthony Risinger wrote: > Do these kind of issues ever linger on unreas

[Distutils] please mark good first issues in your projects

2018-04-13 Thread Sumana Harihareswara
If your project isn't under https://github.com/pypa , but you want to publicize your good first issues, reply to this thread? Thanks. -- Sumana Harihareswara Warehouse project manager Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillis

[Distutils] Warehouse/PyPI update: launch, project wrapup approaching

2018-04-18 Thread Sumana Harihareswara
ing. Thanks as always. Please keep the kind words, bug reports, and -- I hope -- funding coming! :)-- Sumana Harihareswara Warehouse/PyPI project manager Changeset Consulting s...@changeset.nyc Links: 1. https://github.com/python/pypi-infra/commits/master 2. https://status.python.org/in

Re: [Distutils] PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding

2018-04-24 Thread Sumana Harihareswara
And thanks, as ever, to Mozilla for their support for the PyPI & Warehouse work, and to the PSF for facilitating this work! https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html https://blog.mozilla.org/blog/2018/01/23/moss-q4-supporting-python-ecosystem/ MOSS has a number of

[Distutils] PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding

2018-04-24 Thread Sumana Harihareswara
do: * check legacy.pypi.org for any behavior, links, etc. you need * upgrade Artifactory * play our "buy a feature" game * comment on issues that need discussion * help us get more funding for future work Thanks and best wishes. -- Sumana Harihareswara Warehouse/PyPI project manage

[Distutils] PyPI/Warehouse (short) weekly report: beta, pythonhosted docs, PEP 541

2018-03-28 Thread Sumana Harihareswara
whole process. It means a lot. More soon! -- Sumana Harihareswara Warehouse project manager Changeset Consulting s...@changeset.nyc Links: 1. https://mail.python.org/pipermail/python-list/2018-March/thread.html#732228 2. https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in

[Distutils] Warehouse is in beta

2018-03-26 Thread Sumana Harihareswara
psf/WarehouseRoadmap ), the launch and redirect! -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.python.org/mailman/listinfo/distutils-sig

[Distutils] Mac users, upgrade to pip 9.0.3 (due to TLS deprecation)

2018-04-02 Thread Sumana Harihareswara
o python-list/comp.lang.python.) -- Sumana Harihareswara Warehouse project manager Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.python.org/mailman/listinfo/distutils-sig

[Distutils] IRC/Twitter livechats about Warehouse today & Thursday

2018-04-03 Thread Sumana Harihareswara
The next one starts in ~16 minutes. Links, etc. at https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html#livechat . -Sumana On 03/26/2018 05:13 PM, Sumana Harihareswara wrote: > Warehouse developers will be in IRC, in #pypa-dev on Freenode, and on > Twitter (h

[Distutils] PyPI/Warehouse update: new advice & launch, shutdown dates

2018-04-03 Thread Sumana Harihareswara
for user tests[54] * improve the official Python packaging guide[55] * remind well-off companies/foundations you know that further Warehouse work is more likely if they give the PSF donations[56], sponsorship[57], or grants Thanks again to the Mozilla Open Source Support grant[58] that mak

[Distutils] IRC/Twitter livechat hours March 27-April 5

2018-03-26 Thread Sumana Harihareswara
://www.pypa.io/en/latest/code-of-conduct/ .) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.python.org/mailman/listinfo/distutils-sig

[Distutils] prepping PEP 566 support in Twine for tomorrow

2018-03-18 Thread Sumana Harihareswara
, and then tomorrow I plan to release 1.11.0. Code review and testing is welcome, as is camaraderie in #pypa-dev on Freenode. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@python.org https

[Distutils] Twine 1.11.0 released

2018-03-19 Thread Sumana Harihareswara
. Coombs, Maurits van Rees, and Florian Schulze for code, testing, review, documentation, and advice. On 03/18/2018 08:59 AM, Sumana Harihareswara wrote: subject: prepping PEP 566 support in Twine for tomorrow > Per > https://dustingram.com/articles/2018/03/16/markdown-descriptions-on-pypi > ,

[Distutils] PyPI/Warehouse: infrastructure hardening & the CAPTCHA conundrum

2018-03-20 Thread Sumana Harihareswara
and project rating/ranking/stars[43]. And finally, we are ever closer to accepting PEP 541 (and planning followup tasks[44]) and are testing our PEP 566 compliance[45]. And I may start a PEP for a Python package index upload API specification[46]. More next week, as usual. *Thanks to Mozilla for t

[Distutils] TLS support policy & PyPI communications

2018-03-21 Thread Sumana Harihareswara
e shift over. Therefore, since it'll affect so few, I won't shout about TLS versions in my PyPI communications. Marking that here for the record. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG@pyth

Re: [Distutils] Twine 1.10.0rc1 on Test PyPI

2018-03-03 Thread Sumana Harihareswara
Wrong URL (did I mention I'm new at this?). View 1.10.0rc1, including a fairly spiffy new README, at: https://test.pypi.org/project/twine/1.10.0rc1/ -- and please pass word along to our downstreams. -Sumana On 03/02/2018 05:32 PM, Sumana Harihareswara wrote: > (So it turns out I've ta

Re: [Distutils] Twine 1.10.0rc1 on Test PyPI

2018-03-04 Thread Sumana Harihareswara
>>> Oh, I just had an idea - perhaps one could set the PIP_PRE environment >>> variable and that would affect the install and allow the pre-release to be >>> tested. I’ll give that a go. >>> >>>> On 3 Mar, 2018, at 11:06, Sumana Harihareswara

[Distutils] Twine 1.10.0rc1 on Test PyPI

2018-03-02 Thread Sumana Harihareswara
ut: pip install --upgrade --pre --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple twine Please check existing open issues at https://github.com/pypa/twine/issues and open new ones if you have problems. Thanks! -- Sumana Harihareswara Changeset Consul

[Distutils] Package maintainers, please help test PyPI

2018-02-26 Thread Sumana Harihareswara
and package maintainership. We'll be soliciting feedback on other concerns soon! Feedback on user experience, accessibility, and overall ease of use are welcome. Thanks, -- Sumana Harihareswara Warehouse project manager Changeset Consulting https://changeset.nyc

[Distutils] merger versus separation of publishing and download tools

2018-02-28 Thread Sumana Harihareswara
the conversation into different threads, one here and one on GitHub,so please consider this a pointer rather than a fork of the conversation. :) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc ___ Distutils-SIG maillist - Distutils-SIG

[Distutils] Warehouse testing livechat/office hours in IRC today

2018-03-01 Thread Sumana Harihareswara
=#pypa-dev There'll be another one in a few hours. Timings: Thursday March 1st: 1700 UTC / noon-1pm EST Thursday March 1st: 2300 UTC / 6pm-7pm EST The PSF blog post https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html has more info. -- Sumana Harihareswara

[Distutils] Re: Distlib vs Packaging (Was: disable building wheel for a package)

2018-09-21 Thread Sumana Harihareswara
.-- Sumana Harihareswara Changeset Consulting s...@changeset.nyc On Thu, Sep 20, 2018, at 9:34 PM, Bert JW Regeer wrote: > > >> On Sep 20, 2018, at 16:30, Dan Ryan wrote: >> >> Pipenv also uses pip as mentioned several times in the thread, and >> (reit

[Distutils] Stepping away from Twine maintainership

2018-09-25 Thread Sumana Harihareswara
> Between that and Markdown support, there's no excuse for mis-rendered PyPI > descriptions anymore! More details: > https://packaging.python.org/guides/making-a-pypi-friendly-readme/#validating-restructuredtext-markup -- Sumana Harihareswara Changeset Consulting https://changeset.ny

[Distutils] upcoming work to facilitate PyPA communications/roadmaps

2018-12-24 Thread Sumana Harihareswara
all the easier. Thanks, Sumana Harihareswara [0] https://blog.python.org/2018/04/new-pypi-launched-legacy-pypi-shutting.html [1] https://mail.python.org/archives/list/distutils-sig@python.org/thread/YREMU56QKRMTTFBFVFJ2B4EHOEKOJZFJ/ [2] https://mail.python.org/archives/list/distutils-sig@pyt

[Distutils] Re: PyPI security work: multifactor auth progress & help needed

2019-04-03 Thread Sumana Harihareswara
news, folks working on this task have already mentioned WebAuthn, so it is on the table. -- Sumana Harihareswara On Fri, Mar 22, 2019, at 10:37 PM, Wes Turner wrote: > Is webauthn the multi-factor / 2FA spec to implement now? It's now > approved; so while you experts are working on it

[Distutils] Maintainers' summit at PyCon NA

2019-03-02 Thread Sumana Harihareswara
> what challenges have yet to be addressed? Potential topics: CI/CD tooling, > package layout, setuptools, PyPI, licenses compatibility, process and release > tooling And then we could take some of those topics into the sprints. -- Sumana Harihareswara Changeset Consulting https://ch

[Distutils] PyPI security work: multifactor auth progress & help needed

2019-03-22 Thread Sumana Harihareswara
Work has started on the Open Technology Fund-supported project to improve Warehouse security, accessibility, and internationalization. More details in today's progress report: https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/2 best, Sumana

[Distutils] Fwd: [PSF-Community] Google Summer of Code 2019 needs you!

2019-01-31 Thread Sumana Harihareswara
#what_are_the_eligibility_requirements_for_participation ) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc Forwarded Message Subject: [PSF-Community] Google Summer of Code 2019 needs you! Date: Tue, 29 Jan 2019 18:50:12 -0800 From: Terri Oda Reply-To: gsoc-adm...@python.org To: PSF Community Hi Python

[Distutils] Re: PyPI security work: multifactor auth progress & help needed

2019-06-07 Thread Sumana Harihareswara
(for Yubikeys and similar things) is coming this month and maybe as early as next week, and we're also going to parallelize work a bit and start accessibility auditing and improvements. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig

[Distutils] tiny sprint Saturday, June 8th

2019-06-06 Thread Sumana Harihareswara
, and you want to start, this is probably not the best event for you; let me know, and I'll set up a more introductory event in the future.) -- Sumana Harihareswara Warehouse project manager Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To un

[Distutils] new PyPI beta feature: U2F-compatible keys for 2FA

2019-06-18 Thread Sumana Harihareswara
s reports at the Packaging Working Group's wiki page: https://wiki.python.org/psf/PackagingWG . (cross-posted to https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/24 ) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG ma

[Distutils] Re: PyPI will no longer accept compromised passwords!

2019-06-19 Thread Sumana Harihareswara
More context: Donald wrote a blog post soon after this announcement https://caremad.io/posts/2018/08/pypi-compromised-passwords/ with some statistics. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send

[Distutils] Re: PyPI will no longer accept compromised passwords!

2019-06-19 Thread Sumana Harihareswara
More context: Donald wrote a blog post soon after this announcement https://caremad.io/posts/2018/08/pypi-compromised-passwords/ with some statistics. -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org

[Distutils] Re: PyPI security work: multifactor auth progress & help needed

2019-05-22 Thread Sumana Harihareswara
to roll out for everyone, and we’re working on WebAuthN (e.g., Yubikeys). -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3

[Distutils] PyPI two-factor auth (2FA) trial May 3-20

2019-05-02 Thread Sumana Harihareswara
://discuss.python.org/t/pypi-two-factor-auth-2fa-trial-may-3-20/1590 ) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3/lists

[Distutils] Sprints have started at PyCon NA 2019

2019-05-06 Thread Sumana Harihareswara
(Thanks Chris Wilcox for setting that up!) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3/lists/distutils-sig.python.org

[Distutils] Re: PyPI security work: multifactor auth progress & help needed

2019-07-03 Thread Sumana Harihareswara
implementation; and we've started improving Warehouse's (already surprisingly good) accessibility. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https

[Distutils] timeline for new pip resolver rollout - feedback?

2019-08-19 Thread Sumana Harihareswara
and/or UX researcher should do, in my opinion, and because some progress on the increase in metadata strictness https://github.com/pypa/packaging-problems/issues/264 and other issues might help with concerns people have brought up here. -- Sumana Harihareswara PyPI project manager, PyPA member

[Distutils] PyPI & cryptographic signing and malware detection - seeking comment

2019-09-03 Thread Sumana Harihareswara
PyPI administrators need to make use of these features in the future? * What work would the developer need to do to make these features more maintainable by future Warehouse maintainers? -- Sumana Harihareswara PyPI project manager Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing

[Distutils] Re: PyPI & cryptographic signing and malware detection - seeking comment

2019-09-03 Thread Sumana Harihareswara
Sorry, forgot to add: Please comment by September 18th. That's when the RFI ends. Then, the Request for Proposals period will be September 23-October 16. Then we aim to start work in December. (Timeline details are in RFI.) On 9/3/19 10:40 AM, Sumana Harihareswara wrote: https://github.com

[Distutils] localization, accessibility, & security progress on PyPI

2019-09-08 Thread Sumana Harihareswara
work-multifactor-auth-progress-help-needed/1042/47 We've shifted our focus from security work to accessibility & internationalization work. We're aiming to wrap it up by September 30th. -- Sumana Harihareswara PyPI project manager Changeset Consulting https://changeset.nyc -- Distutils-SIG

[Distutils] Re: PyPI security work: multifactor auth progress & help needed

2019-08-06 Thread Sumana Harihareswara
-api.html makes sense to you, please get in touch with our UX researcher and designer, Nicole Harris, via https://calendly.com/nlhkabu/pypi-testing for a 30-minute structured conversation/user test. -- Sumana Harihareswara Warehouse/PyPI project manager Changeset Consulting https

[Distutils] Apply by Nov 22 for paid contract on pip

2019-11-11 Thread Sumana Harihareswara
%20Improvements#Finish_dependency_resolver_for_pip -- Sumana Harihareswara contract project manager for PSF Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3

[Distutils] Re: proposing Python package index upload API spec (potential PEP)

2019-11-18 Thread Sumana Harihareswara
I don't have time to work on this and hope someone else can pick it up - https://github.com/pypa/packaging-problems/issues/128 is a good issue to use to keep track. -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org

[Distutils] Re: Apply by Nov 22 for paid contract on pip

2019-11-12 Thread Sumana Harihareswara
Also: Dustin Ingram wrote a Twitter thread about why this is big news, giving context and shout-outs: https://twitter.com/di_codes/status/1193980331004743680 -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org

[Distutils] Re: Apply by Nov 22 for paid contract on pip

2019-11-26 Thread Sumana Harihareswara
the RfP timeline: https://github.com/python/request-for/blob/master/2020-pip/RFP.md#timeline ) I'm sorry for the delay. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le

[Distutils] localization, accessibility, & security progress on PyPI

2019-10-07 Thread Sumana Harihareswara
finished our OTF-funded accessibility & internationalization work. And sometime this month people will be able to use PyPI in Brazilian Portugese and Japanese! -- Sumana Harihareswara PyPI project manager Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils

[Distutils] Contract available: Help PyPI improve security

2019-10-07 Thread Sumana Harihareswara
. 21st. We hope work can start in early December. PSF got a gift from Facebook Research to fund this work. Please feel free to forward to candidates! https://pyfound.blogspot.com/2019/09/pypi-security-q4-2019-request-for.html is the PSF blog post about it. -- Sumana Harihareswara Changeset

[Distutils] Re: Surviving a Compromise of PyPI - PEP 458 and 480

2019-12-20 Thread Sumana Harihareswara
see https://github.com/secure-systems-lab/peps/blob/c13384a4fac6822626abb7e09ab7f6143179820f/pep-0458.txt ). Current discussion is happening on Discourse: https://discuss.python.org/t/pep-458-surviving-a-compromise-of-pypi/2648/ -- Sumana Harihareswara Changeset Consulting https://cha

[Distutils] FASTEN and dependency analysis at call graph level

2020-02-13 Thread Sumana Harihareswara
about their project here on distutils-sig, because FASTEN's site says they aim to eventually integrate into PyPI -- I'm not 100% sure whether that means "create a service that people can use WITH PyPI" or "get FASTEN's work incorporated into pypi.org". -- Sumana Harihare

[Distutils] Re: Surviving a Compromise of PyPI - PEP 458 and 480

2020-02-12 Thread Sumana Harihareswara
ge-signing/2648/110 : > It looks like discussion about the actual meat and potatoes of this PEP has petered out. Unless someone has an objection, I intend to accept this PEP on Friday. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list --

[Distutils] Re: localization, accessibility, & security progress on PyPI

2020-01-17 Thread Sumana Harihareswara
-progress-help-needed/1042/49 -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3/lists/distutils-sig.python.org/ Message archived

[Distutils] Today: livestreamed talk about PyPI malware detection

2020-03-14 Thread Sumana Harihareswara
ral slides describing what PyPI is, and the difference between packages, releases and files, for example. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python

[Distutils] Online talk in 90 min: how pip works internally

2020-04-07 Thread Sumana Harihareswara
This talk explores what pip does to install your packages. When: April 7th, 9:00 p.m - 10:00 p.m. India time It'll likely be recorded and be available on YouTube afterward. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@

[Distutils] Re: Announcement: pip 20.1b1 beta release

2020-04-21 Thread Sumana Harihareswara
If you're curious about the alpha version of pip's new resolver, please visit [this GitHub issue about the resolver, what doesn't work yet, and what kind of testing would help us out](https://github.com/pypa/pip/issues/8099). -- Sumana Harihareswara Changeset Consulting https://changeset.nyc

[Distutils] Feature Proposal for PyPI: Draft Releases (comment by 30 April)

2020-04-20 Thread Sumana Harihareswara
org/archives/list/distutils-sig@python.org/message/S37OQLGOICR5WBIOTEBHP5ISWCMFAVNT/ ) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman

[Distutils] Re: Today: livestreamed talk about PyPI malware detection

2020-03-16 Thread Sumana Harihareswara
This was recorded and is now at https://www.youtube.com/watch?v=28BoQLWKGWw . -- Sumana Harihareswara Changeset Consulting https://changeset.nyc On 3/14/20 7:24 AM, Sumana Harihareswara wrote: Today at 1pm PT/4pm ET: a livestreamed presentation by Cristina Muñoz, who's been working

[Distutils] Re: Next Pipenv Release

2020-03-27 Thread Sumana Harihareswara
b.com/pypa/pipenv/issues/2818 Add a comment to the top of generated requirements.txt files 5. Make sure to say 'thanks' to Sumana if you see her on IRC, she is responsible for moving this release forward and is pretty great! As you probably guessed, I did not write this line. :-) Thanks, Dan.

[Distutils] Re: Announcement: pip 20.1b1 beta release

2020-04-28 Thread Sumana Harihareswara
We're aiming on releasing pip 20.1 in the next hour or so. If you found bugs to file regarding the beta https://pypi.org/project/pip/20.1b1/ before we release 20.1, now's a good time to do that. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list

[Distutils] Announcement: pip 20.1 release

2020-04-28 Thread Sumana Harihareswara
Seconding Pradyun's thanks! If you want to comment on how we did this beta and how we should do future beta test cycles (shorter? announce in different places? etc.), please comment on https://github.com/pypa/pip/issues/7628 . -- Sumana Harihareswara Changeset Consulting https://changeset.nyc

[Distutils] Re: Announcement: Pipenv Beta Release

2020-05-10 Thread Sumana Harihareswara
Thanks, Dan! Dan is now planning to release tomorrow (Monday). https://github.com/pypa/pipenv/issues/3369#issuecomment-626108212 -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email

[Distutils] pip resolver work chugging along

2020-03-23 Thread Sumana Harihareswara
. And less than half of the test suite fails! Expect errors and missing features, but it’s there! [Celebratory trumpet honk here.] Hope all of you, and all the people you are close to, are healthy and staying that way. -- Sumana Harihareswara pip project manager (contracting with Python Software

[Distutils] Re: pip resolver work chugging along

2020-03-24 Thread Sumana Harihareswara
ntion both to the survey responses and to issues that come in via GitHub. Sounds like you'll be submitting a pull request for that documentation & README change -- go ahead and ping me as @brainwane for review when you do that! Thanks. -- Sumana Harihareswara Changeset Consulting https://changeset.n

[Distutils] Re: pip resolver work chugging along

2020-03-24 Thread Sumana Harihareswara
On 3/24/20 4:13 PM, Sumana Harihareswara wrote: Sounds like you'll be submitting a pull request for that documentation & README change -- go ahead and ping me as @brainwane for review when you do that! Thanks. Sorry, that last bit was kinda snarky. Am making this change myself now. -- Su

[Distutils] Fwd: [tuf] TUF Community Meeting

2020-05-20 Thread Sumana Harihareswara
Heads-up if you are interested in PyPI's implementation of TUF. Forwarded Message Subject:[tuf] TUF Community Meeting Date: Wed, 20 May 2020 09:58:05 -0700 From: Marina Moore To: theupdateframew...@gcom Hello, The next TUF community meeting will be

[Distutils] Pipenv release

2020-05-28 Thread Sumana Harihareswara
And pipenv 2020.5.28 is now out: https://pypi.org/project/pipenv/ This roadmap and contribution process issue https://github.com/pypa/pipenv/issues/4130 is where folks will talk about improving the Pipenv release cadence in the future. -- Sumana Harihareswara Changeset Consulting https

[Distutils] Re: Announcement: pip 20.2 release!

2020-10-23 Thread Sumana Harihareswara
pip 20.2.4 is out right now and has a bunch of performance improvements compared to previous 20.2.x releases, so it's worth trying out. We intend on releasing pip 20.3, with the new dependency resolver as default, next week, maybe Wednesday or Thursday the 28th or 29th of October. -- Sumana

[Distutils] Re: Announcement: pip 20.2 release!

2020-08-01 Thread Sumana Harihareswara
`--no-deps` for a lot of their use cases, but don't know about it. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3/lists

[Distutils] Re: Archive this list & redirect conversation elsewhere?

2020-07-29 Thread Sumana Harihareswara
bridge would be a pretty powerful and flexible combination. Is that something that other folks here who have trouble with Discourse would find fruitful? If so, we can start pushing to make it happen. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list --

[Distutils] Thursday Aug 20th: short talk on PyPI & sustainability

2020-08-12 Thread Sumana Harihareswara
: I was a consultant on this analysis.) -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- distutils-sig@python.org To unsubscribe send an email to distutils-sig-le...@python.org https://mail.python.org/mailman3/lists/distutils-sig.python.org/ Messag

  1   2   >