-c runtime-constraints.in  # limits known broken versions

# NOTE: v6 is needed to support metadata v2.4
twine >= 6.0

# NOTE: Used to detect an ambient OIDC credential for OIDC publishing,
# NOTE: as well as PEP 740 attestations.
id ~= 1.0

# NOTE: This is pulled in transitively through `twine`, but we also declare
# NOTE: it explicitly here because `oidc-exchange.py` uses it.
# Ref: https://github.com/di/id
requests

# NOTE: Used to generate attestations.
pypi-attestations ~= 0.0.15
sigstore ~= 3.5.1

# NOTE: Used to detect the PyPI package name from the distribution files
packaging