Skip to content

Conversation

@woodruffw
Copy link
Member

This retains validation of distribution filenames, but does not go beyond whatever validation packaging's APIs already do (which will hopefully become stricter over time).

Closes #123.

CC @di

Closes #123.

Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw requested a review from facutuesca May 15, 2025 17:17
@woodruffw woodruffw self-assigned this May 15, 2025
Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw merged commit 1ed0bac into main May 15, 2025
8 checks passed
@woodruffw woodruffw deleted the ww/do-not-ultranormalize branch May 15, 2025 18:05
woodruffw added a commit that referenced this pull request Jun 3, 2025
This fixes an error introduced with #124 -- that PR correctly
dropped our "ultranormalization" of distribution names, but
it didn't account for the fact that we were comparing
distribution names as strings, rather than as parsed
forms.

See pypa/gh-action-pypi-publish#365
for more context.

Signed-off-by: William Woodruff <william@trailofbits.com>
facutuesca pushed a commit that referenced this pull request Jun 3, 2025
* bugfix: compare distribution names by parsed forms

This fixes an error introduced with #124 -- that PR correctly
dropped our "ultranormalization" of distribution names, but
it didn't account for the fact that we were comparing
distribution names as strings, rather than as parsed
forms.

See pypa/gh-action-pypi-publish#365
for more context.

Signed-off-by: William Woodruff <william@trailofbits.com>

* ignore long line

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Don't normalize distribution filenames

3 participants