Deploy latest version 4.12.0 to PyPI

[yoobato]

I've noticed that according to the Release page on this GitHub repository,
the current latest version is 4.12.0.

However, it appears that the most recent version registered on [PyPI[(https://pypi.org/project/py-tlsh/) is 4.7.2.

Would you kindly consider publishing version 4.12.0 to PyPI as well? @jonjoliver

Thanks!

[acederberg]

I would like to second this! I am desperately looking for a working python library capable of computing fuzzy hashes, and many of the options have repositories that have not been updated in a long while (> 5 years in most cases).

[gholdengrebe]

+1

[nightlark]

Is there anything preventing an updated release on PyPI? Lost access to whoever or whatever account owns the PyPI package?

[merces]

Tagging @jonjoliver as he's the PyPI package owner.

[armijnhemel]

According to the source code 4.12.1 is the latest. Would it be possible to deploy that one instead?

[nightlark]

I tried reaching out to @jonjoliver using the jon_oliver@trendmicro.com email address listed as the contact for the PyPI package. It got rejected as an invalid recipient. I've also reached out to the emails he has used recently for commits and LinkedIn.

[jonjoliver]

I am getting on with it right now - sorry just crazy busy at work - life gets in the way...
I will deploy to test.pypi.org
Anyone want to help test it?

[jonjoliver]

Could people please check
https://test.pypi.org/project/py-tlsh/4.12.1/

[jonjoliver]

NOTE this is TEST.pypi.org
So you need to:
pip install -i https://test.pypi.org/simple/ py-tlsh==4.12.1

If that has no problems then I will post on the production PyPi

[nightlark]

I’ll give it a try, will try to report results by tomorrow.

[acederberg]

I get the following traceback from pip when I run pip install -i https://test.pypi.org/simple/ py-tlsh==4.12.1:

Defaulting to user installation because normal site-packages is not writeable
Looking in indexes: https://test.pypi.org/simple/
Collecting py-tlsh
  Using cached https://test-files.pythonhosted.org/packages/69/6b/94f9aee3904016a99d2cc9029ff9999f6058d8351e740730ad1a2bdba291/py_tlsh-4.12.1.tar.gz (45 kB)
  Installing build dependencies ... error
  error: subprocess-exited-with-error
  
  × pip subprocess to install build dependencies did not run successfully.
  │ exit code: 1
  ╰─> [3 lines of output]
      Looking in indexes: https://test.pypi.org/simple/
      ERROR: Could not find a version that satisfies the requirement setuptools>=40.8.0 (from versions: none)
      ERROR: No matching distribution found for setuptools>=40.8.0
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
error: subprocess-exited-with-error

× pip subprocess to install build dependencies did not run successfully.
│ exit code: 1
╰─> See above for output.

note: This error originates from a subprocess, and is likely not a problem with pip.

This error does not make much sense to me since setuptools is currently on version 80. However, it does make since upon inspecting the setuptools links page in the test.pypi.org simple index page - this page is empty, unlike the corresponding page for py-tlsh on test.pypi.org/simple/py-tlsh.

[acederberg]

As an addendum to my previous comment, you can successfully install the package using the procedure below:

1. Go to test.pypi.org/simple/py-tlsh,
2. Download this versions tarball directly,
3. run pip install py_tlsh-4.12.1.tar.gz against pypi (or in my case a proxy). If this fails, you need the python-devel package.

I suspect the package should work when pushed to pypi.

[nightlark]

I got results that were similar, it worked when pip installing a downloaded copy of the sdist tarball from test pypi against the dependencies present on the non-test pypi site.