warehouse icon indicating copy to clipboard operation
warehouse copied to clipboard

Reject wheel uploads where compressed tag sets are not sorted

Open di opened this issue 6 months ago • 6 comments

PEP 425 states:

To allow for compact filenames of bdists that work with more than one compatibility tag triple, each tag in a filename can instead be a ‘.’-separated, sorted, set of tags.

However, as we found in #18128, PyPI is currently permitting wheel filenames with unsorted tag sets, e.g. https://pypi.org/project/pyvirtualcam/0.13.0/#pyvirtualcam-0.13.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl should be pyvirtualcam-0.13.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

This should probably happen upstream in pypa/packaging when we parse the wheel filename, and we should probably have a deprecation period where we email warnings prior to outright blocking the upload.

di avatar May 13 '25 14:05 di