Skip to content

Conversation

@mnm678
Copy link
Contributor

@mnm678 mnm678 commented Oct 23, 2020

This commit adds various updates to account for changes in PEP 458, including:

  • updating the link to the Python glossary
  • add definitions of distribution file, target files
  • clarify ‘target files’ and ‘target metadata’
  • Use BLAKE 2 instead of SHA-2 in filenames
  • transaction process -> upload process

This commit also adds a few clarifications about the purpose of this PEP, including adding an overview of the changes needed to implement the PEP

This commit adds various updates to account for changes in PEP 458, including:
* updating the link to the Python glossary
* add definitions of distribution file, target files
* clarify ‘target files’ and ‘target metadata’
* Use BLAKE 2 instead of SHA-2 in filenames
* transaction process -> upload process

This commit also adds a few clarifications about the purpose
of this PEP, including adding an overview of the changes needed
to implement the PEP.

Signed-off-by: marinamoore <mnm678@gmail.com>
Copy link
Contributor

@trishankatdatadog trishankatdatadog left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM except for minor comments

Use the permanent links from theupdateframework.io

Signed-off-by: marinamoore <mnm678@gmail.com>
to developer keys, adding a process to register developer keys with PyPI, and a
change in the upload workflow for developers who take advantage of end-to-end
signing. All of these changes are described in detail later in this PEP. Package
managers that wish to take advantage of end-to-end signing do not need to do any
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With this all in one paragraph, it's easy to miss that the last sentence is about clients rather than the backend infrastructure. I'd suggest make it a separate paragraph and emphasising the *not*

@ncoghlan ncoghlan merged commit 2000c81 into python:master Oct 25, 2020
@ncoghlan
Copy link
Contributor

While I did have a minor cosmetic comment on one of the new paragraphs, I went ahead and merged this to improved the consistency of the online version with PEP 458.

@trishankatdatadog
Copy link
Contributor

Ah, Marina did not add her name to the PEP, I forgot to note this, next time...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants