id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
1896	setuptools will try to download and use release candidates of dependencies, not just releases	davidsarah	daira	"In a recent build for !FreeStorm CentOS6-amd64:
{{{
Searching for pyasn1>=0.0.8a
Reading http://pypi.python.org/simple/pyasn1/
Reading http://sourceforge.net/projects/pyasn1/
Found link: http://sourceforge.net/projects/pyasn1/files/pyasn1/0.1.6/pyasn1-0.1.6rc0.tar.gz/download
Found link: http://sourceforge.net/projects/pyasn1/files/pyasn1/0.1.5/pyasn1-0.1.5.tar.gz/download
[...]
Best match: pyasn1 0.1.6rc0
Downloading http://sourceforge.net/projects/pyasn1/files/pyasn1/0.1.6/pyasn1-0.1.6rc0.tar.gz/download
error: Can't download http://sourceforge.net/projects/pyasn1/files/pyasn1/0.1.6/pyasn1-0.1.6rc0.tar.gz/download: 503 Service Unavailable
}}}

A release candidate should never be a ""best match"" for a dependency; that is just asking for trouble. In this case the build failed because the release candidate wasn't actually downloadable, but even if it had been, we only want to use releases.

Related: #1753, #1582, #1220, #1452.

setuptools delenda est."	defect	closed	major	1.11.0	packaging	1.9.2	fixed	setuptools packaging pip