{"action":"opened","issue":{"url":"https://api.github.com/repos/pypa/setuptools/issues/827","repository_url":"https://api.github.com/repos/pypa/setuptools","labels_url":"https://api.github.com/repos/pypa/setuptools/issues/827/labels{/name}","comments_url":"https://api.github.com/repos/pypa/setuptools/issues/827/comments","events_url":"https://api.github.com/repos/pypa/setuptools/issues/827/events","html_url":"https://github.com/pypa/setuptools/issues/827","id":184989254,"number":827,"title":"setup.py: incorrect dependency link ","user":{"login":"dairiki","id":495018,"avatar_url":"https://avatars.githubusercontent.com/u/495018?v=3","gravatar_id":"","url":"https://api.github.com/users/dairiki","html_url":"https://github.com/dairiki","followers_url":"https://api.github.com/users/dairiki/followers","following_url":"https://api.github.com/users/dairiki/following{/other_user}","gists_url":"https://api.github.com/users/dairiki/gists{/gist_id}","starred_url":"https://api.github.com/users/dairiki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dairiki/subscriptions","organizations_url":"https://api.github.com/users/dairiki/orgs","repos_url":"https://api.github.com/users/dairiki/repos","events_url":"https://api.github.com/users/dairiki/events{/privacy}","received_events_url":"https://api.github.com/users/dairiki/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-25T00:28:37Z","updated_at":"2016-10-25T00:28:37Z","closed_at":null,"body":"Setuptools’ setup.py adds a link for ``certifi`` to ``dependency_links``.  The link it adds (``https://pypi.python.org/packages/source/c/certifi/certifi-2016.9.26.tar.gz``) is broken (404.)\r\n\r\nI'm not totally sure what's going on here.  My guess is that PyPI has changed how downloads are filed.  (Older packages seem to still be available under ``/packages/source``, but recently released packages appear not to be.)\r\n\r\nIn any case, this breaks buildout — at least for me.  Buildout picks up the broken dependency link from the setuptools egg and uses it (unsuccessfully) if an attempt is made to install ``certifi==2016.9.26``."}}
{"actor":{"display_login":"dairiki"}}