From c8e1286c456dc03271ebfb4126adc08a59f0296f Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 4 Feb 2025 22:17:17 +0100 Subject: [PATCH 1/2] deps: bump keyring to >=21.2.0 Signed-off-by: William Woodruff --- pyproject.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 62c32c04..a8dcb42e 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ dependencies = [ "urllib3 >= 1.26.0", "importlib-metadata >= 3.6; python_version < '3.10'", # workaround for missing binaries on these platforms, see #1158 - "keyring >= 15.1; platform_machine != 'ppc64le' and platform_machine != 's390x'", + "keyring >= 21.2.0; platform_machine != 'ppc64le' and platform_machine != 's390x'", "rfc3986 >= 1.4.0", "rich >= 12.0.0", "packaging >= 24.0", @@ -61,7 +61,7 @@ upload = "twine.commands.upload:main" register = "twine.commands.register:main" [project.optional-dependencies] -keyring = ["keyring >= 15.1"] +keyring = ["keyring >= 21.2.0"] [project.scripts] twine = "twine.__main__:main" From 67fa272da584ed507cd2745b97fcfdf56afd3592 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 4 Feb 2025 22:20:55 +0100 Subject: [PATCH 2/2] changelog: record #1229 Signed-off-by: William Woodruff --- changelog/1229.bugfix.rst | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 changelog/1229.bugfix.rst diff --git a/changelog/1229.bugfix.rst b/changelog/1229.bugfix.rst new file mode 100644 index 00000000..a5dc0ac2 --- /dev/null +++ b/changelog/1229.bugfix.rst @@ -0,0 +1,2 @@ +``twine`` now enforces ``keyring >= 21.2.0``, which was previously +implicitly required by API usage.