Skip to content

Unexpected signer of python 3.10.14 #117454

Description

@mangin

Hey there,

Problem

In the documentation we have a note that releases for python 3.10 would be sign by:
Pablo Galindo Salgado (3.10.x and 3.11.x source files and tags) (key id: 64E628F8D684696D)

But the relase 3.10.14 was signed by:
Łukasz Langa (3.8.x and 3.9.x source files and tags) (key id: B269 95E3 1025 0568)

I understand that it's not a big issue. But it breaks my automatization that compile pythons. Maybe we need to make a note that now the released for 3.10.X branch would be signed by different user.

Links:
3.10.13 release
3.10.14 release
OpenPGP Public Keys documentation

Activity

  1. added
    docsDocumentation in the Doc dir
    on Apr 2, 2024
  2. hugovk commented on Apr 2, 2024

    @hugovk
    Member

    3.10.14 was originally signed by Łukasz, but then was re-signed by Pablo two weeks ago, see #117053.

    Can you check you have the latest files, and if so, let us know which ones exactly don't match and where they're from?

  3. mangin commented on Apr 2, 2024

    @mangin
    Author

    I found where, in the internal proxy we have a cache. Sorry for disturbing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    docsDocumentation in the Doc dir

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions