Hi!

While rebuilding the python related packages against the Python 3.15rc2
version we found an issue originated in python-passlib that ends up
causing breakage in other packages.

The problem is that with the switch to the new upstream, the module name
in the pyproject.toml file was changed from passlib to libpass, so that
now the package installs
/usr/lib/python3/dist-packages/libpass-1.9.3.dist-info/METADATA instead
of /usr/lib/python3/dist-packages/passlib-1.7.4.egg-info/PKG-INFO, and
in that file it says Name=libpass.

So now, when packages that build-depend on python3-passlib build,
dh_python can't find the binary dependency. For example, the
reproducible builds logs from mitmproxy show that it's not finding the
dependency [1]. Which was the same thing that we saw in our archive
rebuild [2]. This is the relevant error:

I: dh_python3 pydist:399: Cannot find package that provides passlib.
Please add package that provides it to Build-Depends or add "passlib
python3-passlib" line to debian/py3dist-overrides or add proper
dependency to Depends by hand and ignore this info.

And then, when someone or some code tries to use mitmproxy, it doesn't
work because of the missing dependency. We saw this, for example, in the
rebuild of wapiti [3].

This could be fixed in mitmproxy by adding the suggested line, but it
makes no sense to have to fix all the reverse dependencies, the
python3-passlib package should say upfront that it provides the passlib
module.

This can be done by adding as a pydist file (python3-passlib.pydist),
listing passlib as the module name [4].

Cheers,

[1]:
https://tests.reproducible-builds.org/debian/rbuild/unstable/amd64/mitmproxy_8.1.1-4.rbuild.log.gz
[2]:
https://debusine.debian.net/debian/r-python-python3.15/artifact/4481162/
[3]:
https://debusine.debian.net/debian/r-python-python3.15/artifact/4858343/
[4]:
https://salsa.debian.org/python-team/tools/dh-python/-/blob/master/pydist/README.PyDist

We believe that the bug you reported is fixed in the latest version of
python-passlib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148955@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Maximiliano Curia <maxy@debian.org> (supplier of updated python-passlib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 25 Sep 2026 19:29:31 +0200
Source: python-passlib
Architecture: source
Version: 1.9.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Maximiliano Curia <maxy@debian.org>
Closes: 1148955
Changes:
 python-passlib (1.9.3-3) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Alexandre Detiste ]
   * add debian/upstream/metadata
 .
   [ Maximiliano Curia ]
   * Add a pydist file (Closes: #1148955)
Checksums-Sha1:
 1492ca2d2b399046e0b0b3d4b00d58b4a7197007 2319 python-passlib_1.9.3-3.dsc
 276296a34ac2b767577826686563d81b481559e0 8328 python-passlib_1.9.3-3.debian.tar.xz
 5f1eec138ffeb3af8e04d02dc0b4b1ce473b6024 9184 python-passlib_1.9.3-3_source.buildinfo
Checksums-Sha256:
 926efa3b413ce482a26da1dd45998d2675d4485441a800e287b17a74d84f3259 2319 python-passlib_1.9.3-3.dsc
 10822a48938c0c2519eff52be60f2bbd8c5c219ec062e8042d2c64dcfcf99cde 8328 python-passlib_1.9.3-3.debian.tar.xz
 802e326d77b332176e0ebb28fb07a3a333a45597cb3a1507d44e6ad104c2d7f4 9184 python-passlib_1.9.3-3_source.buildinfo
Files:
 d413c7cdbbd1a37df3578cb4130a250c 2319 python optional python-passlib_1.9.3-3.dsc
 98c1ee208a3d94a2e947089435ead104 8328 python optional python-passlib_1.9.3-3.debian.tar.xz
 c6ab86dac6fa11311efc4766e67068c4 9184 python optional python-passlib_1.9.3-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE+JIdOnQEyG4RNSIVxxl2mbKbIyoFAmq2wakACgkQxxl2mbKb
IyqMhA//cTa0NSM8g2kf4Y5Puu7GC2v0RvbfkapslcF9p6qlmwo/PkvDmqImEb5D
YXjWQ4YHdgPEun46X/0r0bRkjPMyNJvecN2BFXR3yjf21bUHoxWbeRafAloqMH8N
taBVe9xuW3r9pH0gE+l0TjDQIroRHNg7KYjR7MzjFvXIQA4O3pYsUhHu+br9mSns
zUHt7G9QquYgdMXIovtkOB7rNI5yCvYnHWyu2xZAallJ7yZtSrC3IuiXcNrvIEgC
FCEliBWJOSBJ6Utddd4A4/6GdSSMbqlDMPWxQmaqY5kRh4y3n1Qagq9WWznZkM1q
KN1hjewhG8Om5uRr54P9bwDICX9GQhORpZvzx5rPYZjaZ2N8Vz/pWUPnfGuwvrT/
VyIZS/L1l8lbqv+BUedWTqmHhZ9HdUS22L9YzENboQ0aW2C9t/4and3Mh+Uvz4Id
s7mJ9Fe408JRFiJmmkY1+FlmS/J7VTc8DI0H43zbo1pJv/5XFjXbkBykwAKhpTvX
WyMaw2b0TzVbHsF5y1+Idfjx0LFB6SFQ7ZdM+rQtt7/LtrB6mFHwB/rLiXxSRzbk
hw/m+cmbCHYkTZI/dY40aSdC8Uu7IfR8RUslMWtUbAp1Xo6ZkbGnlkED/D0jNhAm
0ElyHbxB2fyuHJoNAarklXHA16B4ACFKEEpUMlxAO67juJy/vKA=
=FDWH
-----END PGP SIGNATURE-----