warehouse

warehouse copied to clipboard

No way to determine which versions have been used by previous owners of a project name

2

**What's the problem this feature will solve?** I'm the owner of the 'quax' project on PyPI. I'm finding that I've been able to upload bdists at versions 0.1.0 and 0.1.1,...

patrick-kidger

Email addresses are currently stored in a `varchar(254)` column in the database, with a non-null, and unique constraint. However, as some email providers allow for extra characters in email addresses,...

miketheman

Pyramid ships with some tools like `pshell`, `proutes`, and more. See https://docs.pylonsproject.org/projects/pyramid/en/latest/narr/commandline.html and https://docs.pylonsproject.org/projects/pyramid/en/latest/pscripts/index.html#pscripts-documentation These tools rely on the existence of a configuration file in `ini` format that can be...

miketheman

`ultranormalize_name` function should strip trailing digits

4

**What's the problem this feature will solve?** Users are able to create packages with extremely similar names by just appending a number, e.g. `pydantic2`. **Describe the solution you'd like** I'd...

samuelcolvin

chore(deps): bump coverage from 7.6.12 to 7.8.0

2

Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.6.12 to 7.8.0. Changelog Sourced from coverage's changelog. Version 7.8.0 — 2025-03-30 Added a new source_dirs setting for symmetry with the existing source_pkgs setting. It's preferable to...

dependabot[bot]

Convert from ElastiCache Redis to ElastiCache Valkey

1

[Valkey](https://valkey.io/) was launched in AWS ElastiCache back in 2024, and claims backwards compatible wire-protocol compliance with open source Redis 7.2, while operating at 20% lower costs (more efficient credits usage...

miketheman

Filing this for myself to fix/improve 🙂 If a user uploads a funky attestation (i.e. one that doesn't roughly match our expectations for a Sigstore issued machine identity cert), the...

woodruffw

**Describe the bug** After being approved, Company Organizations that have not activated a subscription can still receive project transfers. We should disable transfers until billing is setup to keep people...

ewdurbin

**What's the problem this feature will solve?** Names that are similar due to ultra-normalization currently have to be "prohibited" and then released. Changing the function to just allow release of...

Thespi-Brain

Only send "Trusted Publisher ... can be made more secure" emails once per publisher

1

Currently we send a notification email every time a Trusted Publisher is used within an environment for a publisher that is not constrained to an environment: https://github.com/pypi/warehouse/blob/071ee72a906815df6be0a2076e1f792986701f7c/warehouse/oidc/views.py#L325-L342 This is somewhat...

di