Debian Bug report logs - #1084014
zope.i18nmessageid: (build-)depends on deprecated module python3-pkg-resources

version graph

Package: src:zope.i18nmessageid; Maintainer for src:zope.i18nmessageid is Debian Python Team <team+python@tracker.debian.org>;

Reported by: Matthias Klose <doko@debian.org>

Date: Fri, 4 Oct 2024 09:53:54 UTC

Severity: normal

Tags: fixed-upstream, forky, sid

Found in version zope.i18nmessageid/7.0-1

Fixed in version zope.i18nmessageid/8.1-1

Done: Colin Watson <cjwatson@debian.org>

Forwarded to https://github.com/zopefoundation/zope.i18nmessageid/pull/67

Reply or subscribe to this bug.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to Debian Python Team <team+python@tracker.debian.org>:
Bug#1084014; Package src:zope.i18nmessageid. (Fri, 04 Oct 2024 09:53:54 GMT) (full text, mbox, link).


Acknowledgement sent to Matthias Klose <doko@debian.org>:
New Bug report received and forwarded. Copy sent to Debian Python Team <team+python@tracker.debian.org>. (Fri, 04 Oct 2024 09:53:54 GMT) (full text, mbox, link).


Message #5 received at maintonly@bugs.debian.org (full text, mbox, reply):

From: Matthias Klose <doko@debian.org>
To: maintonly@bugs.debian.org
Subject: zope.i18nmessageid: (build-)depends on deprecated module python3-pkg-resources
Date: Fri, 04 Oct 2024 09:52:57 +0000
Package: src:zope.i18nmessageid
Version: 7.0-1
Severity: normal
Tags: sid trixie
User: debian-python@lists.debian.org
Usertags: pkg-resources-deprecation

[This bug is targeted to the upcoming trixie release]

The package build-depends or depends on python3-pkg-resources, which is
deprecated upstream. Details can be found at

    https://setuptools.pypa.io/en/latest/pkg_resources.html

Use of pkg_resources is deprecated in favor of importlib.resources,
importlib.metadata and their backports (importlib_resources, importlib_metadata).
Some useful APIs are also provided by packaging (e.g. requirements and version
parsing). Users should refrain from new usage of pkg_resources and should work
to port to importlib-based solutions.

Python 3.12 in unstable provides both importlib_resources and
importlib_metadata, so no additional dependencies on those packages are needed.



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Python Team <team+python@tracker.debian.org>:
Bug#1084014; Package src:zope.i18nmessageid. (Fri, 04 Oct 2024 10:27:06 GMT) (full text, mbox, link).


Acknowledgement sent to Colin Watson <cjwatson@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Python Team <team+python@tracker.debian.org>. (Fri, 04 Oct 2024 10:27:06 GMT) (full text, mbox, link).


Message #10 received at 1084014@bugs.debian.org (full text, mbox, reply):

From: Colin Watson <cjwatson@debian.org>
To: 1084006@bugs.debian.org, 1084007@bugs.debian.org, 1084008@bugs.debian.org, 1084009@bugs.debian.org, 1084010@bugs.debian.org, 1084011@bugs.debian.org, 1084012@bugs.debian.org, 1084013@bugs.debian.org, 1084014@bugs.debian.org, 1084015@bugs.debian.org, 1084016@bugs.debian.org, 1084017@bugs.debian.org, 1084018@bugs.debian.org, 1084019@bugs.debian.org, 1084020@bugs.debian.org, 1083457@bugs.debian.org, 1083458@bugs.debian.org, 1083460@bugs.debian.org, 1083461@bugs.debian.org
Cc: Matthias Klose <doko@debian.org>
Subject: Migrating away from pkg_resources is difficult for namespace packages
Date: Fri, 4 Oct 2024 11:22:32 +0100
While pkg_resources is indeed deprecated upstream, there's nothing that
we can sensibly do about it at the Debian level in lazr.* or zope.*, and
it's not even as clear as you might hope what to do upstream.  They all
do something like this in an __init__.py (with unimportant variations):

  __import__('pkg_resources').declare_namespace(__name__)

As
https://packaging.python.org/en/latest/guides/packaging-namespace-packages/#pkg-resources-style-namespace-packages
says:

  If you are creating a new distribution within an existing namespace
  package that uses this method then it’s recommended to continue using
  this as the different methods are not cross-compatible and it’s not
  advisable to try to migrate an existing package.

I know pkg_resources is deprecated for most other purposes, but even
upstream currently advises here not to try to migrate in this case.
Now, I know there've been some attempts to figure this out:
https://github.com/pypa/sample-namespace-packages thinks a migration may
be possible as long as developers are willing to accept some
limitations.  But it's still a difficult migration and upstream hasn't
really got going on it; for Zope, see
https://github.com/zopefoundation/meta/issues/194.

Please can you reconsider, and not force this for Debian trixie?  I
think we need to keep pkg_resources around for this use case until a
good deal more work has been done on migrating away from it for
namespace packages.

-- 
Colin Watson (he/him)                              [cjwatson@debian.org]



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Python Team <team+python@tracker.debian.org>:
Bug#1084014; Package src:zope.i18nmessageid. (Sat, 05 Oct 2024 03:00:03 GMT) (full text, mbox, link).


Acknowledgement sent to Matthias Klose <doko@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Python Team <team+python@tracker.debian.org>. (Sat, 05 Oct 2024 03:00:03 GMT) (full text, mbox, link).


Message #15 received at 1084014@bugs.debian.org (full text, mbox, reply):

From: Matthias Klose <doko@debian.org>
To: Colin Watson <cjwatson@debian.org>, 1084006@bugs.debian.org, 1084007@bugs.debian.org, 1084008@bugs.debian.org, 1084009@bugs.debian.org, 1084010@bugs.debian.org, 1084011@bugs.debian.org, 1084012@bugs.debian.org, 1084013@bugs.debian.org, 1084014@bugs.debian.org, 1084015@bugs.debian.org, 1084016@bugs.debian.org, 1084017@bugs.debian.org, 1084018@bugs.debian.org, 1084019@bugs.debian.org, 1084020@bugs.debian.org, 1083457@bugs.debian.org, 1083458@bugs.debian.org, 1083460@bugs.debian.org, 1083461@bugs.debian.org
Subject: Re: Migrating away from pkg_resources is difficult for namespace packages
Date: Sat, 5 Oct 2024 04:34:54 +0200
On 04.10.24 12:22, Colin Watson wrote:
> While pkg_resources is indeed deprecated upstream, there's nothing that
> we can sensibly do about it at the Debian level in lazr.* or zope.*, and
> it's not even as clear as you might hope what to do upstream.  They all
> do something like this in an __init__.py (with unimportant variations):
> 
>    __import__('pkg_resources').declare_namespace(__name__)
> 
> As
> https://packaging.python.org/en/latest/guides/packaging-namespace-packages/#pkg-resources-style-namespace-packages
> says:
> 
>    If you are creating a new distribution within an existing namespace
>    package that uses this method then it’s recommended to continue using
>    this as the different methods are not cross-compatible and it’s not
>    advisable to try to migrate an existing package.
> 
> I know pkg_resources is deprecated for most other purposes, but even
> upstream currently advises here not to try to migrate in this case.
> Now, I know there've been some attempts to figure this out:
> https://github.com/pypa/sample-namespace-packages thinks a migration may
> be possible as long as developers are willing to accept some
> limitations.  But it's still a difficult migration and upstream hasn't
> really got going on it; for Zope, see
> https://github.com/zopefoundation/meta/issues/194.
> 
> Please can you reconsider, and not force this for Debian trixie?  I
> think we need to keep pkg_resources around for this use case until a
> good deal more work has been done on migrating away from it for
> namespace packages.

I don't want to force it.  the separation of this module into it's own 
module is a Debian specific change to avoid runtime dependencies on 
pkg_resources.  So you'll find a lot of hard-coded dependencies that are 
just not used anymore. That's what I want to catch for the trixie release.

Matthias




Added tag(s) forky. Request was from Sebastian Ramacher <sramacher@debian.org> to control@bugs.debian.org. (Sun, 17 Aug 2025 18:14:20 GMT) (full text, mbox, link).


Set Bug forwarded-to-address to 'https://github.com/zopefoundation/zope.i18nmessageid/pull/67'. Request was from Colin Watson <cjwatson@debian.org> to control@bugs.debian.org. (Sun, 21 Sep 2025 10:07:04 GMT) (full text, mbox, link).


Added tag(s) fixed-upstream. Request was from debian-bts-link@lists.debian.org to control@bugs.debian.org. (Mon, 29 Sep 2025 18:07:15 GMT) (full text, mbox, link).


Reply sent to Colin Watson <cjwatson@debian.org>:
You have taken responsibility. (Sun, 02 Nov 2025 20:41:02 GMT) (full text, mbox, link).


Notification sent to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer. (Sun, 02 Nov 2025 20:41:02 GMT) (full text, mbox, link).


Message #26 received at 1084014-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1084014-close@bugs.debian.org
Subject: Bug#1084014: fixed in zope.i18nmessageid 8.1-1
Date: Sun, 02 Nov 2025 20:39:06 +0000
[Message part 1 (text/plain, inline)]
Source: zope.i18nmessageid
Source-Version: 8.1-1
Done: Colin Watson <cjwatson@debian.org>

We believe that the bug you reported is fixed in the latest version of
zope.i18nmessageid, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1084014@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Watson <cjwatson@debian.org> (supplier of updated zope.i18nmessageid package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 02 Nov 2025 20:24:21 +0000
Source: zope.i18nmessageid
Architecture: source
Version: 8.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1084014
Changes:
 zope.i18nmessageid (8.1-1) unstable; urgency=medium
 .
   * New upstream release:
     - Remove run-time dependency on `setuptools` (closes: #1084014).
Checksums-Sha1:
 568b347dc8e96fca649b715d89c0b8eed3d4a15b 2362 zope.i18nmessageid_8.1-1.dsc
 a6dd63544a7954f7749dfa47f5d887a229d966ec 26697 zope.i18nmessageid_8.1.orig.tar.gz
 dcc4f9c5fb5d9102e848defa815dd82d82babcbe 6360 zope.i18nmessageid_8.1-1.debian.tar.xz
Checksums-Sha256:
 9ed38a0299ec88f6c35c44c1a5781ae954a896fffe40357142a67832918ac3e2 2362 zope.i18nmessageid_8.1-1.dsc
 316158203ad2a38bbdb32a66d4e77ea435d13e85e21d304e66e8f135f5e858b5 26697 zope.i18nmessageid_8.1.orig.tar.gz
 1f4591dbfc4f4e4c75af7a06b4466b9be35cbd78f2cc6f4f9db4fc25e68f4788 6360 zope.i18nmessageid_8.1-1.debian.tar.xz
Files:
 1317efeadabd4581890df02f49cc192e 2362 zope optional zope.i18nmessageid_8.1-1.dsc
 93ac82fd7c4a34bf460b2a7e04a2d2d9 26697 zope optional zope.i18nmessageid_8.1.orig.tar.gz
 0380d453a12fdce7239509e2f487f508 6360 zope optional zope.i18nmessageid_8.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=9vk1
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

Removed tag(s) trixie. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Sun, 21 Dec 2025 01:03:05 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 2 07:43:52 2026; Machine Name: berlioz

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.