Skip to content

Python 3.10.16 release is missing GPG signatures #127601

@edmorley

Description

@edmorley

Bug report

Bug description:

The Python 3.10.16 release is missing the GPG signature files (note no "GPG" column in the table):
https://www.python.org/downloads/release/python-31016/

eg:

$ curl -I https://www.python.org/ftp/python/3.10.16/Python-3.10.16.tgz.asc
HTTP/2 404
content-type: text/html
x-clacks-overhead: GNU Terry Pratchett
server: nginx
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 0
date: Wed, 04 Dec 2024 12:02:53 GMT
x-served-by: cache-lga21939-LGA, cache-lga21939-LGA, cache-lhr-egll1980061-LHR
x-cache: MISS, HIT, MISS
x-cache-hits: 0, 3, 0
x-timer: S1733313773.280317,VS0,VE73
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 146

This is causing our release process for the new binaries to fail, blocking releasing this security update to users:
https://github.com/heroku/heroku-buildpack-python/actions/runs/12159162945/job/33908683580#step:4:19

All of the other releases mentioned in https://blog.python.org/2024/12/python-3131-3128-31111-31016-and-3921.html have their GPG signatures, as does the last Python 3.10.x release (3.10.15).

This seems to be a repeat of #123807.

cc @pablogsal

CPython versions tested on:

3.10

Operating systems tested on:

Linux

Metadata

Metadata

Assignees

No one assigned

    Labels

    type-bugAn unexpected behavior, bug, or error

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions