CVS commit: pkgsrc/net/py-twine

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Sep 21 16:24:44 UTC 2025

Modified Files:
        pkgsrc/net/py-twine: Makefile distinfo

Log Message:
py-twine: update to 6.2.0.

twine 6.2.0 (2025-09-04)
------------------------

Features
^^^^^^^^

- Automatically refresh short-lived PyPI token in long running Trusted
  Publishing uploads.

  In the event that a trusted publishing upload job is taking longer than the
  validity period of a trusted publishing token (15 minutes at the time of this
  writing), *and* we are already 10 minutes into that validity period, we will
  begin to attempt to replace the token on each subsequent request. (`#1246 <https://github.com/pypa/twine/issues/1246>`_)

Bugfixes
^^^^^^^^

- Fix compatibility kludge for invalid License-File metadata entries emitted by
  build backends to work also with ``packaging`` version 24.0. (`#1217 <https://github.com/pypa/twine/issues/1217>`_)
- Fix a couple of incorrectly rendered error messages. (`#1224 <https://github.com/pypa/twine/issues/1224>`_)
- ``twine`` now enforces ``keyring >= 21.2.0``, which was previously
  implicitly required by API usage. (`#1229 <https://github.com/pypa/twine/issues/1229>`_)
- ``twine`` now catches ``configparser.Error`` to prevent accidental
  leaks of secret tokens or passwords to the user's console. (`#1240 <https://github.com/pypa/twine/issues/1240>`_)

Deprecations and Removals
^^^^^^^^^^^^^^^^^^^^^^^^^

- Remove hacks that support ``--skip-existing`` for indexes other than PyPI and
  TestPyPI.

  To date, these hacks continue to accrue and there have been numerous issues
  with them, not the least of which being that every time we update them, the
  paid index providers change things to break the compatibility we implement
  for them. Beyond that, these hacks do not work when text is internationalized
  in the response from the index provider.

  For a sample of past issues, see:

  - https://github.com/pypa/twine/issues/1251

  - https://github.com/pypa/twine/issues/918

  - https://github.com/pypa/twine/issues/856

  - https://github.com/pypa/twine/issues/693

  - https://github.com/pypa/twine/issues/332 (`#1251 <https://github.com/pypa/twine/issues/1251>`_)
- Remove support for MD5 digests during uploads.

  This support was entirely vestigial, as MD5 is not a secure hash function
  and is not actually required on upload by PyPI.

  Indices that cross-reference the uploaded content with a digest should
  use the provided SHA-256 and/or BLAKE2 digests instead. (`#1262 <https://github.com/pypa/twine/issues/1262>`_)

Misc
^^^^

- `#1247 <https://github.com/pypa/twine/issues/1247>`_


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/net/py-twine/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/py-twine/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/py-twine/Makefile
diff -u pkgsrc/net/py-twine/Makefile:1.20 pkgsrc/net/py-twine/Makefile:1.21
--- pkgsrc/net/py-twine/Makefile:1.20   Sun Apr 13 19:04:22 2025
+++ pkgsrc/net/py-twine/Makefile        Sun Sep 21 16:24:44 2025
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.20 2025/04/13 19:04:22 wiz Exp $
+# $NetBSD: Makefile,v 1.21 2025/09/21 16:24:44 wiz Exp $
 
-DISTNAME=      twine-6.1.0
+DISTNAME=      twine-6.2.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=   1
 CATEGORIES=    net python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=t/twine/}
 
@@ -30,6 +29,9 @@ TEST_DEPENDS+=        ${PYPKGPREFIX}-test_socke
 
 USE_LANGUAGES= # none
 
+# as of 6.2.0
+# 1 failed, 228 passed
+
 post-install:
        cd ${DESTDIR}${PREFIX}/bin && \
        ${MV} twine twine-${PYVERSSUFFIX} || ${TRUE}

Index: pkgsrc/net/py-twine/distinfo
diff -u pkgsrc/net/py-twine/distinfo:1.10 pkgsrc/net/py-twine/distinfo:1.11
--- pkgsrc/net/py-twine/distinfo:1.10   Fri Jan 31 18:32:35 2025
+++ pkgsrc/net/py-twine/distinfo        Sun Sep 21 16:24:44 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.10 2025/01/31 18:32:35 wiz Exp $
+$NetBSD: distinfo,v 1.11 2025/09/21 16:24:44 wiz Exp $
 
-BLAKE2s (twine-6.1.0.tar.gz) = 9cb8ca9ae3c165c6b3e9c760763fe8bdc908ea5ceb454ad9180e03bca99704c4
-SHA512 (twine-6.1.0.tar.gz) = 8aaf2c57d969ced91757458a1a893634e5d3f6e3b6862b7f01400e2acef8dfcfb5d8e4d72227a3906c83f168225f47f17e238986c230f7a1968c62a841236926
-Size (twine-6.1.0.tar.gz) = 168404 bytes
+BLAKE2s (twine-6.2.0.tar.gz) = 9da6ab84be4f4080d1d3208fedd64f8955c0302defc63f93c5f5c7a6cd953ce8
+SHA512 (twine-6.2.0.tar.gz) = c55145f626095eb4fbe6463dbc7a6314d523d6b303a46ccfd78723075fcc36afcb17e69db9219494751f5fd1e59a92b09fb774b32cc5f05fa0ff51e8d2424729
+Size (twine-6.2.0.tar.gz) = 172262 bytes