From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id UDLSI+MB8mPv6AAAbAwnHQ (envelope-from ) for ; Sun, 19 Feb 2023 12:02:59 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id +MLlIuMB8mNxQAEAG6o9tA (envelope-from ) for ; Sun, 19 Feb 2023 12:02:59 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5A68D50FC for ; Sun, 19 Feb 2023 12:02:59 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pThSh-0000OM-Uq; Sun, 19 Feb 2023 06:02:31 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pThSe-0000O7-DA for guix-devel@gnu.org; Sun, 19 Feb 2023 06:02:30 -0500 Received: from hera.aquilenet.fr ([2a0c:e300::1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pThSa-0000kc-Nb for guix-devel@gnu.org; Sun, 19 Feb 2023 06:02:27 -0500 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id EDEC3CE7; Sun, 19 Feb 2023 12:02:17 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at hera.aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4OzOFlrIC_J6; Sun, 19 Feb 2023 12:02:17 +0100 (CET) Received: from jurong (unknown [IPv6:2001:861:c4:f2f0::c64]) by hera.aquilenet.fr (Postfix) with ESMTPSA id F1F85363; Sun, 19 Feb 2023 12:02:16 +0100 (CET) Date: Sun, 19 Feb 2023 12:02:15 +0100 From: Andreas Enge To: guix-devel@gnu.org Subject: Python (was: Merging core-updates?) Message-ID: References: <20230212100540.2214f16c@sybil.lepiller.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Received-SPF: permerror client-ip=2a0c:e300::1; envelope-from=andreas@enge.fr; helo=hera.aquilenet.fr X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1676804579; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=/1AubrDYWa/XxQZe3krON1QPsTzp8T1fIyv/EjHVjys=; b=rT0wafc8fellQVZoAuFRrs3aoWHIcdFrYaEnLnrabjhgTlm1dMrvdoip0mTyfHeMmrrVcB Us/ct9Czxj9y5mzrDnS4hLdwksDuNqiwC71uqKox0V/Xlkk1xvgL+cDSb4GdPT4F6YaHN3 XJZxX8mXi/GiIZy8ueZAmq9dRhPQjySY4u0A8TK9hyR8eSdxluNMdOIRKMyGBTP5ryuntr Y7uXerz7CbXl1c26bOADQgkZh++zASqWMLfiFVrX1IHOcPTDkqFCDITS44gPQLSh5Vfp/V IRzTQZ4e6CRpxEC/o1oK6rkuES2qbchzPmTpTayPOwSsMvfBRGtpeCs4KuDeVQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1676804579; a=rsa-sha256; cv=none; b=mIsuQAZMC1r6kuqTYdip2aVpNxi1d6QAfE/p4NoTFbf5OADZukNSVKRYAovYuyAH0snAfl sQZiUEk0nHAgtyCAkSRlCZDgzDpB5AZlR9yEU/M/Zlu5WRV/Vp+X3RuwhsLflIVlLXJkuA 3sRLsTykyekICkmu8nPSmfTMuT0OpFpLz1h6UtaATRlFtB46TbIykD9H59UDjREc+p/xce Vvx8kTR3fqyCJIwtMFPdWpjcCBPCjUIZxiB0anDYpQ+EvGCCyWy8CzAgtvHkbl74h2LZ9x wZHFFJyrxJLAwZjLfdJ18LDUZrIp8UoDibS7pJ948HKroTLauflq34X9sN3RBg== X-Spam-Score: -2.44 X-Migadu-Queue-Id: 5A68D50FC Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none X-Migadu-Scanner: scn1.migadu.com X-Migadu-Spam-Score: -2.44 X-TUID: AitWZ1/Y7hlJ Hello, I am having problems with at least two python packages in core-updates: *** File "/gnu/store/5i3yqwaqd8mayl2vr9lmrihxwv8203b1-python-pycrypto-2.6.1/lib/python3.10/site-packages/Crypto/Util/number.py", line 139 value |= 2L ** (N-1) # Ensure high bit is set ^ SyntaxError: invalid decimal literal error: in phase 'install': uncaught exception: %exception #<&invoke-error program: "python" arguments: ("-m" "compileall" "--invalidation-mode=unchecked-hash" "/gnu/store/5i3yqwaqd8mayl2vr9lmrihxwv8203b1-python-pycrypto-2.6.1") exit-status: 1 term-signal: #f stop-signal: #f> phase `install' failed after 0.5 seconds command "python" "-m" "compileall" "--invalidation-mode=unchecked-hash" "/gnu/store/5i3yqwaqd8mayl2vr9lmrihxwv8203b1-python-pycrypto-2.6.1" failed with status 1 starting phase `sanity-check' validating 'attrdict' /gnu/store/lvy1fmmf1dsr3fjw82zal2aaisf3d47k-python-attrdict-2.0.1/lib/python3.10/site-pac kages ...checking requirements: OK ...trying to load module attrdict: ERROR: Traceback (most recent call last): File "/gnu/store/35ix1m6m8a5s21j02ajhdyqxb2xkshfb-sanity-check.py", line 69, in importlib.import_module(name) File "/gnu/store/blals34ar25fiifvm17m2b504waxzys0-python-3.10.7/lib/python3.10/importlib/__init__.py", line 126, in import_module return _bootstrap._gcd_import(name[level:], package, level) File "", line 1050, in _gcd_import File "", line 1027, in _find_and_load File "", line 1006, in _find_and_load_unlocked File "", line 688, in _load_unlocked File "", line 883, in exec_module File "", line 241, in _call_with_frames_removed File "/gnu/store/lvy1fmmf1dsr3fjw82zal2aaisf3d47k-python-attrdict-2.0.1/lib/python3.10/site-packages/attrdict/__init__.py", line 5, in from attrdict.mapping import AttrMap File "/gnu/store/lvy1fmmf1dsr3fjw82zal2aaisf3d47k-python-attrdict-2.0.1/lib/python3.10/site-packages/attrdict/mapping.py", line 4, in from collections import Mapping ImportError: cannot import name 'Mapping' from 'collections' (/gnu/store/blals34ar25fiifvm17m2b504waxzys0-python-3.10.7/lib/python3.10/collections/__init__.py) error: in phase 'sanity-check': uncaught exception: %exception #<&invoke-error program: "python" arguments: ("/gnu/store/35ix1m6m8a5s21j02ajhdyqxb2xkshfb-sanity-check.py" "/gnu/store/lvy1fmmf1dsr3fjw82zal2aaisf3d47k-python-attrdict-2.0.1/lib/python3.10/site-packages") exit-status: 1 term-signal: #f stop-signal: #f> phase `sanity-check' failed after 0.2 seconds command "python" "/gnu/store/35ix1m6m8a5s21j02ajhdyqxb2xkshfb-sanity-check.py" "/gnu/store/lvy1fmmf1dsr3fjw82zal2aaisf3d47k-python-attrdict-2.0.1/lib/python3.10/site-packages" failed with status 1 for python-attrdict. Both are at their latest version from Pypi. Have there been some incompatible changes in Python 3.10? Should we revert the Python update or try to backport patches? (I have no idea about Python, and probably need it only for calibre.) Andreas PS: On the second issue: The latest commit is this: v2.0.1 2019/02/01 -- Haven't used or looked at this in years so updating tests to the current version of python and then marking it inactive. This would rather make me thing we should drop it, but here we go: Building the following 160 packages would ensure 366 dependent packages are rebuilt: kicad@6.0.10 ... There is something called attrdict3: https://pypi.org/project/attrdict3/ at the same version +0.0.1; maybe we should use this? PPS: On the first issue, the homepage says: PyCrypto 2.x is unmaintained, obsolete, and contains security vulnerabilities. Please choose one of the following alternatives: Cryptography Recommended for new applications. Newer API with fewer gotchas. API docs GitHub PyPI PyCryptodome Recommended for existing software that depends on PyCrypto. Fork of PyCrypto. Most applications should run unmodified. API docs GitHub PyPI Then we have: Building the following 6 packages would ensure 9 dependent packages are rebuilt: python-miio@0.5.11 ledger-agent@0.9.0 electrum@4.3.2 eolie@0.9.101 jrnl@1.9.7 poezio@0.13.2 We already have python-pycryptodome and python-pycryptodomex. Maybe we should try rebuilding the 9 dependent packages with one of them? Do the specialists have a preference as to which one to use? Both have a similar number of dependents currently.