4.0.0 release is missing sdist tarball on pypi

[mgorny]

🐛 Bug Report

It seems that the 4.0.0 release on pypi includes only wheels but missed the .tar.gz archive needed to build from source.

To Reproduce

Visit https://pypi.org/project/selenium/#files

Expected behavior

.tar.gz archive being present

Test script or set of commands reproducing this issue

n/a

Environment

OS: Gentoo Linux
Browser: n/a
Browser version: n/a
Browser Driver version: n/a
Language Bindings version: Python (any)
Selenium Grid version (if applicable): n/a

[AutomatedTester]

I will need to look into this with Bazel.

I honestly thought everyone had moved to wheels for distribution of packages these days. What is the main use case for you for needing the sdist version?

[mgorny]

Distributions still build their packages from sources.

[chenrui333]

Yes, Homebrew would need the pypi artifact to build the formula from sources.

[chenrui333]

Any update on this thread? Thanks!

[bollwyvl]

everyone had moved to wheels

Can confirm this is also blocking on conda-forge, and is indeed still documented in py/README.rst:

Alternately, you can download the source distribution from PyPI (e.g. selenium-4.1.0.tar.gz), unarchive it, and run:

In the meantime, I'm investigating a full bazel build... but humorously, invoking bazel build //py:selenium naively fails because pytest-trio... doesn't distribute a whl 🤣

If the contents of py really are enough to build a distribution, that would get us going, and will be investigating further, but a PyPI sdist would indeed be preferred!

[pombredanne]

gentle ping: everyone expects to have source distributions available. Wheels are great, and wanted but not enough.

[apteryks]

For the record, the only two files need to run the test suite which are not in a git checkout are these:

• selenium/webdriver/remote/getAttribute.js
• selenium/webdriver/remote/isDisplayed.js

I have no idea how they come into existence (I don't use or know about Bazel, and it's been too messy for anyone to successfully package yet on GNU Guix).

[symonk]

bump; we should release a source distribution on pypi; I'm not sure where those *.js files are being pulled in from; but editable installs etc are a no-go atm for me locally

[pombredanne]

For the record, the only two files need to run the test suite which are not in a git checkout are these:

selenium/webdriver/remote/getAttribute.js
selenium/webdriver/remote/isDisplayed.js

I have no idea how they come into existence (I don't use or know about Bazel, and it's been too messy for anyone to successfully package yet on GNU Guix).

Both seem to be minified and obfuscated JS files, e.g. generated from some other sources. This is the prefect reason why we need a source archive: these are essentially the same and as opaque as a compiled binary. For all I know these could be malicious files. It is unlikely... but I cannot tell.
I surmise these have been compiled with Google's closure compiler and the unobfuscated source are likely present in the repo... but this is a supposition.