Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PyPI releases #88

Open
jnoortheen opened this issue Aug 21, 2018 · 5 comments
Open

PyPI releases #88

jnoortheen opened this issue Aug 21, 2018 · 5 comments

Comments

@jnoortheen
Copy link

It would be great if the latest changes landing in master released to PyPI at the same time. This process can be automated once and for all.

@aldwyn
Copy link

aldwyn commented Aug 30, 2018

Hi everyone. We see that your project in PyPI hasn't been updated yet. Can you release the latest change on PyPI? Because manually installing this repo on pip via specific commit from git creates a large file that forces us to use slim_handler. In turn, the deployment fails because there's something wrong with the slim_handler when I use it in my zappa settings. It forces me to not use slim_handler instead even though it uploads some 131 MB zip file to Lambda.

(In my case, the error with slim_handler is that it can't find the modules specified in the events field of the zappa settings when triggered. But this issue should be on another discourse.)

@hyrsky
Copy link
Contributor

hyrsky commented Sep 6, 2018

I was having trouble with old version of cryptography library included in this package causing the same error as here: Miserlou/Zappa#1455. I found workaround by installing this package from Github and excluding it in zappa_settings.json so I don't have to use slim handler.

pip install git+https://github.com/Miserlou/lambda-packages.git

And add this to zappa_settings.json

"exclude": ["lambda_packages*"]

@mcrowson
Copy link
Collaborator

mcrowson commented Sep 6, 2018

In your zappa_settings.json you can just set use_precompiled_packages to false if you're trying to avoid lambda_packages entirely.

@drewpc
Copy link

drewpc commented Sep 12, 2018

Same problem and the previously mentioned:

"exclude": ["lambda_packages*"]

hack didn't prevent the huge zip file. Still waiting for this to be properly pushed to PyPI.

@disambiguator
Copy link

Further motivation to make a new release - cryptography 2.1.4 has a CVE, fixed in 2.3.1.
https://nvd.nist.gov/vuln/detail/CVE-2018-10903

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants