[PATCH gpgme] Fix prerelease Python sdist tarball creation and add PEP517 support

David Runge dave at sleepmap.de
Wed Nov 30 15:31:15 CET 2022

On 2022-11-30 13:47:30 (+0100), Werner Koch wrote:
> I might be misunderstanding something.  However, we do not do anything
> with pypi in GnuPG.

The current available gpg package on pypi.org [1] is an sdist tarball,
generated from gpgme 1.10.0.
The gpgme sources even provide a make target [2] for upload to pypi.org.
It appears that Justus Winter [3] is the person, that last updated and
maintained the sdist tarball for you.

> Thus I can't see what your patch is about.

The 1st patch is about creating an sdist tarball (using the existing
make target) without specifying obsolete options and also allowing the
use of prerelease versions (because Python names them differently - e.g.
1.0.0-alpha -> 1.0.0a).
The 2nd patch is about enabling PEP517 [4] based build backends, which can
use PEP518 [5] based build requirements in a pyproject.toml, to build a
wheel from the sdist tarball on pypi.org.

> In fact GPGME comes with its own and different Python language
> bindings.

As noted above, the sdist tarball on pypi.org was generated from the
gpgme sources (albeit from a very old version) in 2018.

Please reinstate this going forward, as it allows Python projects to use
gpg in virtualenvs (which is a huge chunk of current projects) for
testing and running a project.

Without an up-to-date and functional sdist tarball on pypi.org, projects
can only use system provided packages, which makes projects not be
self-contained and unable to test and run in a Python virtual


[1] https://pypi.org/project/gpg/
[2] https://github.com/gpg/gpgme/blob/ac4536990a4fed4a45a0851260c029e69d0cadf6/lang/python/Makefile.am#L62-L65
[3] https://pypi.org/user/justus.winter/
[4] https://peps.python.org/pep-0517/
[5] https://peps.python.org/pep-0518/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20221130/07ce7d9e/attachment.sig>

More information about the Gnupg-devel mailing list