warehouse
warehouse copied to clipboard
Reject wheel uploads where compressed tag sets are not sorted
PEP 425 states:
To allow for compact filenames of bdists that work with more than one compatibility tag triple, each tag in a filename can instead be a ‘.’-separated, sorted, set of tags.
However, as we found in #18128, PyPI is currently permitting wheel filenames with unsorted tag sets, e.g. https://pypi.org/project/pyvirtualcam/0.13.0/#pyvirtualcam-0.13.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl should be pyvirtualcam-0.13.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl
This should probably happen upstream in pypa/packaging when we parse the wheel filename, and we should probably have a deprecation period where we email warnings prior to outright blocking the upload.