diff --git a/requirements/runtime-constraints.in b/requirements/runtime-constraints.in index e4afedd..3781170 100644 --- a/requirements/runtime-constraints.in +++ b/requirements/runtime-constraints.in @@ -13,8 +13,3 @@ # remain in Git. # # # ############################################################################### - -# NOTE: 1.12.0 and later enable support for metadata 2.4 -# NOTE: This can be dropped once twine stops using pkginfo -# Ref: https://github.com/pypa/twine/pull/1180 -pkginfo >= 1.12.0 diff --git a/requirements/runtime.in b/requirements/runtime.in index 5861e0b..5c01a09 100644 --- a/requirements/runtime.in +++ b/requirements/runtime.in @@ -1,7 +1,7 @@ -c runtime-constraints.in # limits known broken versions -# NOTE: v6 is needed to support metadata v2.4 -twine >= 6.0 +# NOTE: v6.1 is needed to support metadata v2.4 including PEP 639 +twine >= 6.1 # NOTE: Used to detect an ambient OIDC credential for OIDC publishing, # NOTE: as well as PEP 740 attestations. diff --git a/requirements/runtime.txt b/requirements/runtime.txt index ac8be5d..9b39e76 100644 --- a/requirements/runtime.txt +++ b/requirements/runtime.txt @@ -38,6 +38,7 @@ id==1.4.0 # via # -r runtime.in # sigstore + # twine idna==3.7 # via # email-validator @@ -71,10 +72,6 @@ packaging==24.1 # -r runtime.in # pypi-attestations # twine -pkginfo==1.12.0 - # via - # -c runtime-constraints.in - # twine platformdirs==4.2.2 # via sigstore pyasn1==0.6.0 @@ -141,7 +138,7 @@ six==1.16.0 # via python-dateutil tuf==5.0.0 # via sigstore -twine==6.0.1 +twine==6.1.0 # via -r runtime.in typing-extensions==4.11.0 # via