Description

zooba

opened on Mar 31, 2026

Issue body actions

Currently we list MD5 because that's what the website needed, but it can handle SHA256 now so we should use those instead. Change should be in ci/release.yml for Azure Pipelines.

(Bonus points if someone knows how to use the API to publish the release all the way and wants to script it... looking at @hugovk )

Activity

1. zooba

   added

   enhancementNew feature or requestNew feature or request

   on Mar 31, 2026
2. hugovk commented on Apr 1, 2026

   

   hugovk

   on Apr 1, 2026

   Member

   More actions

   python/pythondotorg#2830 is where we added support to the website API to receive SHA-256.

   python/release-tools#310 is where we updated the release to send SHA-256 when uploading files to the website API.

   So in addition to the existing md5_sum field, there's a new sha256 field.

   If you send both, the website will only show SHA-256, but both are stored in the database. We'll likely stop sending MD5 soon for Python releases, and it'll just show those.
3. zooba

   self-assigned this

   on Apr 10, 2026
4. zooba

   added a commit that references this issue on Apr 15, 2026

   Merge branch 'main' into pythongh-302

   b62bbca
5. zooba commented on Apr 15, 2026

   

   zooba

   on Apr 15, 2026

   MemberAuthor

   More actions

   The SHA-256 hashes are now listed as of #312, so I'm keeping this open to track automatic creation of the release on python.org.
6. zooba

   changed the title [-]List SHA256 hashes in release build[/-] [+]Create pydotorg release automatically[/+] on Apr 15, 2026

Issue actions