Release artifacts missing for 2.1.0
Bug #2028764 reported by
David Runge
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lazr.delegates |
New
|
Undecided
|
Unassigned |
Bug Description
Hi! I package this project for Arch Linux.
The current release on PyPI is 2.1.0, which unfortunately has no respective artifacts on launchpad.
Could you please add them?
Also, since PyPI just silently removed the OpenPGP signature files for existing releases, they broke our reproducibility and trust path [1].
Can you therefore please also attach a signature file for a release tarball, signed by either AC0A4FF12611B6F
This would allow us to use launchpad as trusted upstream going forward.
Thank you! :)
[1] https:/
To post a comment you must log in.
Let's discuss in https:/ /bugs.launchpad .net/lazr. config/ +bug/2028762