Bug 2189970

Created attachment 1960152 [details]
Update to 2.29.0 (#2189970)

the-new-hotness/release-monitoring.org's scratch build of python-requests-2.29.0-1.fc36.src.rpm for rawhide failed http://koji.fedoraproject.org/koji/taskinfo?taskID=100421578

Releases retrieved: 2.30.0
Upstream release that is considered latest: 2.30.0
Current version/release in rawhide: 2.28.2-1.fc38
URL: https://pypi.io/project/requests

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/4004/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-requests

Created attachment 1961991 [details]
Update to 2.30.0 (#2189970)

the-new-hotness/release-monitoring.org's scratch build of python-requests-2.30.0-1.fc36.src.rpm for rawhide failed http://koji.fedoraproject.org/koji/taskinfo?taskID=100695687

Releases retrieved: 2.31.0
Upstream release that is considered latest: 2.31.0
Current version/release in rawhide: 2.28.2-1.fc38
URL: https://pypi.io/project/requests

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/4004/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-requests

Scratch build failed. Details below:

BuilderException: Build failed:
Command '['rpmbuild', '-D', '_sourcedir .', '-D', '_topdir .', '-bs', '/var/tmp/thn-05gd3gjc/python-requests.spec']' returned non-zero exit status 1.

StdOut:
setting SOURCE_DATE_EPOCH=1684713600
error: Bad file: ./requests-v2.31.0.tar.gz: No such file or directory

RPM build errors:
    Bad file: ./requests-v2.31.0.tar.gz: No such file or directory


Traceback:
  File "/usr/local/lib/python3.11/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/hotness/builders/koji.py", line 225, in build
    raise BuilderException(

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Created attachment 1966231 [details]
Update to 2.31.0 (#2189970)

btw: This also blocks python-requests 0.23.2 (no bugzilla issue yet)

The latest requests update needs to address the HTTPResponse/urllib3 changes with strict requests, CacheControl's split patching, and poetry's requirement locking.
- CacheControl 0.13.0 DOES build correctly but poetry is currently grabbing ^0.12.9
Others have had issues with urllib3, lockfile to filelock, and the HTTPResponse shape changing, so we dont expect a blatent sed update on poetry requirements to go smoothly
- CacheControl 0.12.* DOES NOT build correctly b/c of the strict change in requests' HTTPResponse/urllib3 changes
- CacheControl 0.12.* could be patched manually to get the strict updates from 0.13.0 but there still may be some urllib3 pinning issues (tbd, this is basically the route the new maintainer is taking by cranking out 0.12.* releases after the 0.13.0 dropped)

CacheControl has been stable with the choices being 0.12.9+manual patching or 0.13.1.
Poetry is still locked to python-CacheControl ^0.12.9 until the master branch (no releases using 0.13.* yet).

The preference would be to update CacheControl to 0.13.* and watch for lockfile->filelock issues across other dependent packages.
Additional research required.

PR: https://src.fedoraproject.org/rpms/python-requests/pull-request/29

FEDORA-2024-a5f2f1d88b has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-a5f2f1d88b

FEDORA-2024-a5f2f1d88b has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.