././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.5036843 twine-7.0.0/0000755000175100017510000000000015231700051012304 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.coveragerc0000644000175100017510000000060415231700043014426 0ustar00runnerrunner[run] branch = True dynamic_context = test_function [report] # Regexes for lines to exclude from consideration exclude_lines = # Have to re-enable the standard pragma pragma: no cover # Don't complain if non-runnable code isn't run if __name__ == .__main__.: # exclude typing.TYPE_CHECKING if TYPE_CHECKING: if t.TYPE_CHECKING: [html] show_contexts = True ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.flake80000644000175100017510000000076015231700043013463 0ustar00runnerrunner[flake8] # Matching black's default max-line-length = 88 extend-ignore = # Missing docstring in __init__ D107 per-file-ignores = # TODO: Incrementally add missing docstrings # D100 Missing docstring in public module # D101 Missing docstring in public class # D102 Missing docstring in public method # D103 Missing docstring in public function # D104 Missing docstring in public package twine/*: D100,D101,D102,D103,D104 tests/*: D100,D101,D102,D103,D104 ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.git-blame-ignore-revs0000644000175100017510000000067315231700043016413 0ustar00runnerrunner# When making commits that are strictly formatting/style changes, add the # commit hash here, so git blame can ignore the change. # Use as needed with: # git blame --ignore-revs-file .git-blame-ignore-revs # Or automatically with: # git config blame.ignoreRevsFile .git-blame-ignore-revs a12ad693137d82770e6118ea8d90955e2c753305 # Format twine and tests with black f468612c021eae225b07f1b654bdb620d1500bf1 # Sort imports with isort ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4932346 twine-7.0.0/.github/0000755000175100017510000000000015231700050013643 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4938784 twine-7.0.0/.github/ISSUE_TEMPLATE/0000755000175100017510000000000015231700050016026 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/ISSUE_TEMPLATE/01_upload_failed.yml0000644000175100017510000001030515231700043021642 0ustar00runnerrunnername: "Upload Error" description: "Failed to upload artifact(s)" labels: ["support"] body: - type: markdown attributes: value: > ## Your Environment Thank you for taking the time to report an issue. To more efficiently resolve this issue, we'd like to know some basic information about your system and setup. - type: checkboxes attributes: label: "Is there an existing issue for this?" description: "Please search to see if there's an existing issue for what you're reporting" options: - label: "I have searched the existing issues (open and closed), and could not find an existing issue" required: true - type: textarea id: search-keywords attributes: label: "What keywords did you use to search existing issues?" description: "In the event that you could not find a duplicate, but it existed, this will help us better link issues in the future" placeholder: | authorization artifactory jfrog devpi - type: dropdown id: environment-os attributes: label: "What operating system(s) are you using?" multiple: true options: - "Windows 10" - "Windows 11" - "Linux" - "macOS" - "Other" validations: required: true - type: input id: environment-os-other attributes: label: "If you selected 'Other', describe your Operating System here" validations: required: false - type: textarea id: environment-py attributes: label: "What version of Python are you running?" description: "Please copy and paste the command and output used to retrieve this (this will be console rendered automatically)" placeholder: | $ python --version Python 3.11.4 render: console validations: required: true - type: textarea id: environment-installer attributes: label: "How did you install twine? Did you use your operating system's package manager or pip or something else?" description: "Please copy and paste the command(s) you used to install twine" placeholder: | $ pip install twine $ dnf install twine $ apt install twine $ brew install twine render: console validations: required: true - type: textarea id: version attributes: label: "What version of twine do you have installed (include the complete output)" description: "Please copy and paste the complete output of `twine --version`" placeholder: | $ twine --version twine version 1.15.0 (pkginfo: 1.4.2, requests: 2.19.1, setuptools: 40.4.3, requests-toolbelt: 0.8.0, tqdm: 4.26.0) render: console validations: required: true - type: input id: package-repository attributes: label: "Which package repository are you using?" placeholder: | pypi.org test.pypi.org validations: required: true - type: textarea id: issue attributes: label: "Please describe the issue that you are experiencing" placeholder: "When I run twine upload it does ... but I expect it to do ..." validations: required: true - type: textarea id: reproduction-steps attributes: label: "Please list the steps required to reproduce this behaviour" placeholder: | 1. Install twine in a virtual environment 1. Build this package at github.com/... 1. Run `twine upload dist/*` validations: required: true - type: textarea id: pkg-info attributes: label: "Please include the PKG-INFO file contents from the artifact you're attempting to upload" description: "note: this will be email formatted automatically" render: email validations: required: true - type: textarea id: pypirc attributes: label: "A redacted version of your `.pypirc` file" description: "REMOVE ALL USERNAMES & PASSWORDS; note: this will be ini formatted automatically" render: ini validations: required: true - type: textarea id: other attributes: label: "Anything else you'd like to mention?" validations: required: false ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/ISSUE_TEMPLATE/02_bug.yml0000644000175100017510000000737215231700043017642 0ustar00runnerrunnername: "Bug Report" description: "Something went wrong with twine (other than an upload error)" labels: ["bug"] body: - type: markdown attributes: value: > ## Your Environment Thank you for taking the time to report an issue. To more efficiently resolve this issue, we'd like to know some basic information about your system and setup. - type: checkboxes attributes: label: "Is there an existing issue for this?" description: "Please search to see if there's an existing issue for what you're reporting" options: - label: "I have searched the existing issues (open and closed), and could not find an existing issue" required: true - type: textarea id: search-keywords attributes: label: "What keywords did you use to search existing issues?" description: "In the event that you could not find a duplicate, but it existed, this will help us better link issues in the future" placeholder: | authorization artifactory jfrog devpi - type: dropdown id: environment-os attributes: label: "What operating system are you using?" multiple: true options: - "Windows 10" - "Windows 11" - "Linux" - "macOS" - "Other" validations: required: true - type: input id: environment-os-other attributes: label: "If you selected 'Other', describe your Operating System here" placeholder: "example: Linux hostname 6.5.10-200.fc38.x86_64" validations: required: false - type: textarea id: environment-py attributes: label: "What version of Python are you running?" description: "Please copy and paste the command and output used to retrieve this (this will be console rendered automatically)" placeholder: | $ python --version Python 3.11.4 render: console validations: required: true - type: textarea id: environment-installer attributes: label: "How did you install twine? Did you use your operating system's package manager or pip or something else?" description: "Please copy and paste the command(s) you used to install twine" placeholder: | $ pip install twine $ dnf install twine $ apt install twine $ brew install twine render: console validations: required: true - type: textarea id: version attributes: label: "What version of twine do you have installed (include the complete output)" description: "Please copy and paste the complete output of `twine --version`" placeholder: | $ twine --version twine version 1.15.0 (pkginfo: 1.4.2, requests: 2.19.1, setuptools: 40.4.3, requests-toolbelt: 0.8.0, tqdm: 4.26.0) render: console validations: required: true - type: input id: package-repository attributes: label: "Which package repository are you using?" placeholder: | pypi.org test.pypi.org validations: required: true - type: textarea id: issue attributes: label: "Please describe the issue that you are experiencing" placeholder: "When I run twine upload it does ... but I expect it to do ..." validations: required: true - type: textarea id: reproduction-steps attributes: label: "Please list the steps required to reproduce this behaviour" placeholder: | 1. Install twine in a virtual environment 1. Build this package at github.com/... 1. Run `twine upload dist/*` validations: required: true - type: textarea id: other attributes: label: "Anything else you'd like to mention?" validations: required: false ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/ISSUE_TEMPLATE/03_feature.yml0000644000175100017510000000252115231700043020510 0ustar00runnerrunnername: "Feature Request" description: "Something is missing from Twine" labels: ["enhancement", "feature request"] body: - type: checkboxes attributes: label: "Is there an existing issue for this?" description: "Please search to see if there's an existing issue for what you're reporting" options: - label: "I have searched the existing issues (open and closed), and could not find an existing issue" required: true - type: textarea id: search-keywords attributes: label: "What keywords did you use to search existing issues?" description: "In the event that you could not find a duplicate, but it existed, this will help us better link issues in the future" placeholder: | authorization artifactory jfrog devpi - type: textarea id: problem attributes: label: "Please describe the problem you are attempting to solve with this request" description: "Is there missing behaviour or some other issue?" placeholder: "When I run twine upload it does ... but I wish it would ..." validations: required: true - type: textarea id: proposed-solution attributes: label: "How do you think we should solve this?" - type: textarea id: other attributes: label: "Anything else you'd like to mention?" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/ISSUE_TEMPLATE/04_other.yml0000644000175100017510000000206415231700043020201 0ustar00runnerrunnername: "Other" description: "This does not fit into the other categories" labels: ["enhancement", "feature request"] body: - type: checkboxes attributes: label: "Is there an existing issue for this?" description: "Please search to see if there's an existing issue for what you're reporting" options: - label: "I have searched the existing issues (open and closed), and could not find an existing issue" required: true - type: textarea id: search-keywords attributes: label: "What keywords did you use to search existing issues?" description: "In the event that you could not find a duplicate, but it existed, this will help us better link issues in the future" placeholder: | authorization artifactory jfrog devpi - type: textarea id: other-description attributes: label: "Please describe why your using this option" validations: required: true - type: textarea id: other attributes: label: "Anything else you'd like to mention?" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/ISSUE_TEMPLATE/config.yml0000644000175100017510000000022015231700043020012 0ustar00runnerrunnerblank_issues_enabled: false contact_links: - name: Packaging issues or metadata issues url: https://github.com/pypa/packaging-problems/issues ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/dependabot.yml0000644000175100017510000000023115231700043016471 0ustar00runnerrunnerversion: 2 updates: - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" cooldown: default-days: 7 ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4942267 twine-7.0.0/.github/workflows/0000755000175100017510000000000015231700050015700 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/workflows/codeql-analysis.yml0000644000175100017510000000574715231700043021532 0ustar00runnerrunner# For most projects, this workflow file will not need changing; you simply need # to commit it to your repository. # # You may wish to alter this file to override the set of languages analyzed, # or to provide custom queries or build logic. # # ******** NOTE ******** # We have attempted to detect the languages in your repository. Please check # the `language` matrix defined below to confirm you have the correct set of # supported CodeQL languages. # name: "CodeQL" on: push: branches: [ "main" ] pull_request: # The branches below must be a subset of the branches above branches: [ "main" ] schedule: - cron: '43 23 * * 6' permissions: contents: read jobs: analyze: name: Analyze runs-on: ubuntu-latest permissions: actions: read contents: read security-events: write strategy: fail-fast: false matrix: language: [ 'python' ] # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support steps: - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. # Prefix the list here with "+" to use these queries and those in the config file. # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # queries: security-extended,security-and-quality # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 # ℹ️ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun # If the Autobuild fails above, remove it and uncomment the following three lines. # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. # - run: | # echo "Run, Build Application using script" # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 with: category: "/language:${{matrix.language}}" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/workflows/main.yml0000644000175100017510000000776415231700043017367 0ustar00runnerrunnername: Main on: push: branches: - main pull_request: schedule: - cron: "0 0 * * *" # daily concurrency: group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }} cancel-in-progress: true env: FORCE_COLOR: "1" TOX_TESTENV_PASSENV: "FORCE_COLOR" MIN_PYTHON_VERSION: "3.10" DEFAULT_PYTHON_VERSION: "3.11" permissions: contents: read jobs: lint: runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ env.DEFAULT_PYTHON_VERSION }} - name: Install dependencies run: python -m pip install tox - name: Run linting run: python -m tox -e lint test: strategy: matrix: python-version: - "3.10" - "3.11" - "3.12" - "3.13" - "3.14" platform: - ubuntu-latest - macos-latest - windows-latest tox-environment: - py runs-on: ${{ matrix.platform }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ matrix.python-version }} - name: Install dependencies run: python -m pip install tox - name: Run type-checking run: python -m tox -e types - name: Run tests run: python -m tox -e ${{ matrix.tox-environment }} # Because the tests can be flaky, they shouldn't be required for merge, but # it's still helpful to run them on PRs. See: # https://github.com/pypa/twine/issues/684#issuecomment-703150619 integration: # Only run on Ubuntu because most of the tests are skipped on Windows runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ env.MIN_PYTHON_VERSION }} - name: Install dependencies run: python -m pip install tox - name: Run tests run: python -m tox -e integration docs: runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ env.MIN_PYTHON_VERSION }} - name: Install dependencies run: python -m pip install tox - name: Build docs run: python -m tox -e docs # https://github.com/marketplace/actions/alls-green#why check: # This job does nothing and is only used for the branch protection if: always() needs: - lint - test - integration - docs runs-on: ubuntu-latest steps: - name: Decide whether the needed jobs succeeded or failed uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2 with: allowed-failures: integration # can be flaky jobs: ${{ toJSON(needs) }} release: needs: - check if: github.event_name == 'push' && contains(github.ref, 'refs/tags/') runs-on: ubuntu-latest steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ env.MIN_PYTHON_VERSION }} - name: Install dependencies run: python -m pip install tox - name: Release run: tox -e release env: TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }} ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.github/workflows/release.yml0000644000175100017510000000274315231700043020053 0ustar00runnerrunnername: Publish to PyPI on: push: tags: - "*" permissions: contents: read jobs: build: name: "Build dists" runs-on: "ubuntu-latest" environment: name: "publish" steps: - name: "Checkout repository" uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5.0.1 with: persist-credentials: false - name: "Setup Python" uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: "3.x" - name: "Install dependencies" run: python -m pip install build - name: "Build dists" run: | SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) \ python -m build - name: "Upload dists" uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: "dist" path: "dist/" if-no-files-found: error retention-days: 5 publish: name: "Publish to PyPI" if: startsWith(github.ref, 'refs/tags/') needs: ["build"] permissions: contents: write id-token: write runs-on: "ubuntu-latest" steps: - name: "Download dists" uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: "dist" path: "dist/" - name: "Publish dists to PyPI" uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.gitignore0000644000175100017510000000245315231700043014301 0ustar00runnerrunner# Byte-compiled / optimized / DLL files __pycache__/ *.py[cod] *$py.class # C extensions *.so # Distribution / packaging .Python build/ develop-eggs/ dist/ downloads/ eggs/ .eggs/ lib/ lib64/ parts/ sdist/ var/ wheels/ *.egg-info/ .installed.cfg *.egg MANIFEST pip-wheel-metadata/ # PyInstaller # Usually these files are written by a python script from a template # before PyInstaller builds the exe, so as to inject date/other infos into it. *.manifest *.spec # Installer logs pip-log.txt pip-delete-this-directory.txt # Unit test / coverage reports htmlcov/ .tox/ .nox/ .coverage .coverage.* .cache nosetests.xml coverage.xml *.cover .hypothesis/ .pytest_cache/ # Translations *.mo *.pot # Django stuff: *.log local_settings.py db.sqlite3 # Flask stuff: instance/ .webassets-cache # Scrapy stuff: .scrapy # Sphinx documentation docs/_build/ # PyBuilder target/ # Jupyter Notebook .ipynb_checkpoints # IPython profile_default/ ipython_config.py # pyenv .python-version # celery beat schedule file celerybeat-schedule # SageMath parsed files *.sage.py # Environments .env .venv env/ venv/ ENV/ env.bak/ venv.bak/ # Spyder project settings .spyderproject .spyproject # Rope project settings .ropeproject # mkdocs documentation /site # mypy .mypy_cache/ .dmypy.json dmypy.json monkeytype.sqlite3 mypy/ ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.isort.cfg0000644000175100017510000000024115231700043014201 0ustar00runnerrunner[settings] profile=black force_single_line=True single_line_exclusions=typing default_section=THIRDPARTY known_third_party=build known_first_party=twine,helpers ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/.readthedocs.yaml0000644000175100017510000000112015231700043015526 0ustar00runnerrunner# .readthedocs.yaml # Read the Docs configuration file # See https://docs.readthedocs.io/en/stable/config-file/v2.html for details version: 2 sphinx: configuration: docs/conf.py fail_on_warning: true formats: - htmlzip - pdf - epub build: os: ubuntu-22.04 tools: python: "3.11" python: # Install twine first, because RTD uses `--upgrade-strategy eager`, # which installs the latest version of docutils via readme_renderer. # However, Sphinx 4.2.0 requires docutils>=0.14,<0.18. install: - method: pip path: . - requirements: docs/requirements.txt ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/AUTHORS0000644000175100017510000000277715231700043013372 0ustar00runnerrunner# A list of people who have contributed to twine in order of their first # contribution. # # Uses the format of ``Name (url)`` with the ``(url)`` # being optional. Donald Stufft (https://caremad.io/) Jannis Leidel Ralf Schmitt Ian Cordasco Marc Abramowitz (http://marc-abramowitz.com/) Tom Myers Rodrigue Cloutier Tyrel Souza (https://tyrelsouza.com) Adam Talsma Jens Diemer (http://jensdiemer.de/) Andrew Watts Anna Martelli Ravenscroft Sumana Harihareswara Dustin Ingram (https://di.codes) Jesse Jarzynka (https://www.jessejoe.com/) László Kiss Kollár Frances Hocutt Tathagata Dasgupta Wasim Thabraze Varun Kamath Brian Rutledge Peter Stensmyr (http://www.peterstensmyr.com) Felipe Mulinari Rocha Campos Devesh Kumar Singh Yesha Maggi Cyril de Catheu (https://catheu.tech/) Thomas Miedema Hugo van Kemenade (https://github.com/hugovk) Jacob Woliver (jmw.sh) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/LICENSE0000644000175100017510000002273715231700043013325 0ustar00runnerrunner Apache License Version 2.0, January 2004 https://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.5036511 twine-7.0.0/PKG-INFO0000644000175100017510000000673615231700051013415 0ustar00runnerrunnerMetadata-Version: 2.4 Name: twine Version: 7.0.0 Summary: Collection of utilities for publishing packages on PyPI Author-email: Donald Stufft and individual contributors License-Expression: Apache-2.0 Project-URL: Homepage, https://twine.readthedocs.io/ Project-URL: Source, https://github.com/pypa/twine/ Project-URL: Documentation, https://twine.readthedocs.io/en/latest/ Project-URL: Packaging tutorial, https://packaging.python.org/tutorials/packaging-projects/ Classifier: Intended Audience :: Developers Classifier: Natural Language :: English Classifier: Operating System :: MacOS :: MacOS X Classifier: Operating System :: POSIX Classifier: Operating System :: POSIX :: BSD Classifier: Operating System :: POSIX :: Linux Classifier: Operating System :: Microsoft :: Windows Classifier: Programming Language :: Python Classifier: Programming Language :: Python :: 3 Classifier: Programming Language :: Python :: 3 :: Only Classifier: Programming Language :: Python :: 3.10 Classifier: Programming Language :: Python :: 3.11 Classifier: Programming Language :: Python :: 3.12 Classifier: Programming Language :: Python :: 3.13 Classifier: Programming Language :: Python :: 3.14 Classifier: Programming Language :: Python :: Implementation :: CPython Requires-Python: >=3.10 Description-Content-Type: text/x-rst License-File: LICENSE Requires-Dist: readme-renderer>=35.0 Requires-Dist: requests>=2.20 Requires-Dist: requests-toolbelt!=0.9.0,>=0.8.0 Requires-Dist: urllib3>=1.26.0 Requires-Dist: keyring>=21.2.0; platform_machine != "ppc64le" and platform_machine != "s390x" Requires-Dist: rfc3986>=1.4.0 Requires-Dist: rich>=14.3.3 Requires-Dist: packaging>=26.1 Requires-Dist: id Provides-Extra: keyring Requires-Dist: keyring>=21.2.0; extra == "keyring" Dynamic: license-file .. |twine-version| image:: https://img.shields.io/pypi/v/twine.svg :target: https://pypi.org/project/twine .. |python-versions| image:: https://img.shields.io/pypi/pyversions/twine.svg :target: https://pypi.org/project/twine .. |docs-badge| image:: https://img.shields.io/readthedocs/twine :target: https://twine.readthedocs.io .. |build-badge| image:: https://img.shields.io/github/actions/workflow/status/pypa/twine/main.yml?branch=main :target: https://github.com/pypa/twine/actions |twine-version| |python-versions| |docs-badge| |build-badge| twine ===== Twine is a utility for `publishing`_ Python packages on `PyPI`_. It provides build system independent uploads of source and binary `distribution artifacts `_ for both new and existing `projects`_. See our `documentation`_ for a description of features, installation and usage instructions, and links to additional resources. Contributing ------------ See our `developer documentation`_ for how to get started, an architectural overview, and our future development plans. Code of Conduct --------------- Everyone interacting in the Twine project's codebases, issue trackers, chat rooms, and mailing lists is expected to follow the `PSF Code of Conduct`_. .. _`publishing`: https://packaging.python.org/tutorials/packaging-projects/ .. _`PyPI`: https://pypi.org .. _`distributions`: https://packaging.python.org/glossary/#term-Distribution-Package .. _`projects`: https://packaging.python.org/glossary/#term-Project .. _`documentation`: https://twine.readthedocs.io/ .. _`developer documentation`: https://twine.readthedocs.io/en/latest/contributing.html .. _`PSF Code of Conduct`: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/README.rst0000644000175100017510000000332315231700043013775 0ustar00runnerrunner.. |twine-version| image:: https://img.shields.io/pypi/v/twine.svg :target: https://pypi.org/project/twine .. |python-versions| image:: https://img.shields.io/pypi/pyversions/twine.svg :target: https://pypi.org/project/twine .. |docs-badge| image:: https://img.shields.io/readthedocs/twine :target: https://twine.readthedocs.io .. |build-badge| image:: https://img.shields.io/github/actions/workflow/status/pypa/twine/main.yml?branch=main :target: https://github.com/pypa/twine/actions |twine-version| |python-versions| |docs-badge| |build-badge| twine ===== Twine is a utility for `publishing`_ Python packages on `PyPI`_. It provides build system independent uploads of source and binary `distribution artifacts `_ for both new and existing `projects`_. See our `documentation`_ for a description of features, installation and usage instructions, and links to additional resources. Contributing ------------ See our `developer documentation`_ for how to get started, an architectural overview, and our future development plans. Code of Conduct --------------- Everyone interacting in the Twine project's codebases, issue trackers, chat rooms, and mailing lists is expected to follow the `PSF Code of Conduct`_. .. _`publishing`: https://packaging.python.org/tutorials/packaging-projects/ .. _`PyPI`: https://pypi.org .. _`distributions`: https://packaging.python.org/glossary/#term-Distribution-Package .. _`projects`: https://packaging.python.org/glossary/#term-Project .. _`documentation`: https://twine.readthedocs.io/ .. _`developer documentation`: https://twine.readthedocs.io/en/latest/contributing.html .. _`PSF Code of Conduct`: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4943628 twine-7.0.0/changelog/0000755000175100017510000000000015231700050014232 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/changelog/.gitignore0000644000175100017510000000001415231700043016217 0ustar00runnerrunner!.gitignore ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4950018 twine-7.0.0/docs/0000755000175100017510000000000015231700050013233 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/changelog.rst0000644000175100017510000007247515231700043015735 0ustar00runnerrunner========= Changelog ========= This project follows the `semantic versioning `_ and `pre-release versioning `_ schemes recommended by the Python Packaging Authority. .. Do *NOT* add changelog entries here! This changelog is managed by towncrier and is built at release time. See https://twine.readthedocs.io/en/latest/contributing.html#changelog-entries for details. .. towncrier release notes start twine 7.0.0 (2026-07-27) ------------------------ Bugfixes ^^^^^^^^ - Specify UTF-8 encoding when reading ``.pypirc`` files. (`#1268 `_) - Add missing subdependencies to ``--version`` output. (`#1275 `_) - The dependency on ``rich`` has been bumped to avoid a hang in some environments. (`#1308 `_) - Indices that respond with non-standard HTTP codes are now handled more gracefully. (`#1309 `_) Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^ - Fix uploading packages with metadata version 2.5. The fix no longer allows metadata version 2.0, which was never officially standardised. (`#1317 `_) Misc ^^^^ - `#1298 `_ twine 6.2.0 (2025-09-04) ------------------------ Features ^^^^^^^^ - Automatically refresh short-lived PyPI token in long running Trusted Publishing uploads. In the event that a trusted publishing upload job is taking longer than the validity period of a trusted publishing token (15 minutes at the time of this writing), *and* we are already 10 minutes into that validity period, we will begin to attempt to replace the token on each subsequent request. (`#1246 `_) Bugfixes ^^^^^^^^ - Fix compatibility kludge for invalid License-File metadata entries emitted by build backends to work also with ``packaging`` version 24.0. (`#1217 `_) - Fix a couple of incorrectly rendered error messages. (`#1224 `_) - ``twine`` now enforces ``keyring >= 21.2.0``, which was previously implicitly required by API usage. (`#1229 `_) - ``twine`` now catches ``configparser.Error`` to prevent accidental leaks of secret tokens or passwords to the user's console. (`#1240 `_) Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^ - Remove hacks that support ``--skip-existing`` for indexes other than PyPI and TestPyPI. To date, these hacks continue to accrue and there have been numerous issues with them, not the least of which being that every time we update them, the paid index providers change things to break the compatibility we implement for them. Beyond that, these hacks do not work when text is internationalized in the response from the index provider. For a sample of past issues, see: - https://github.com/pypa/twine/issues/1251 - https://github.com/pypa/twine/issues/918 - https://github.com/pypa/twine/issues/856 - https://github.com/pypa/twine/issues/693 - https://github.com/pypa/twine/issues/332 (`#1251 `_) - Remove support for MD5 digests during uploads. This support was entirely vestigial, as MD5 is not a secure hash function and is not actually required on upload by PyPI. Indices that cross-reference the uploaded content with a digest should use the provided SHA-256 and/or BLAKE2 digests instead. (`#1262 `_) Misc ^^^^ - `#1247 `_ Twine 6.1.0 (2025-01-17) ------------------------ Features ^^^^^^^^ - Twine now has preliminary built-in support for `Trusted Publishing `_ as an authentication mechanism. (`#1194 `_) Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^ - Remove support for ``egg`` and ``wininst`` distribution types. These are not accepted by PyPI and not produced by any modern build-backends. (`#1195 `_) - Twine no longer supports ``.tar.bz2`` source distributions. (`#1200 `_) Misc ^^^^ - ``packaging`` is used instead of ``pkginfo`` for parsing and validating metadata. This aligns metadata validation to the one performed by PyPI. ``packaging`` version 24.0 or later is required. Support for metadata version 2.4 requires ``packaging`` 24.2 or later. ``pkginfo`` is not a dependency anymore. (`#1180 `_) - Use ``"source"`` instead of ``None`` as ``pyversion`` for ``sdist`` uploads. This is what PyPI (and most likely other package indexes) expects. (`#1191 `_) Twine 6.0.1 (2024-11-30) ------------------------ Bugfixes ^^^^^^^^ - Fixed a regression where ``twine check`` would fail to expand wildcards, e.g. ``twine check 'dist/*'``. (`#1188 `_) Misc ^^^^ - `#1184 `_ Twine 6.0.0 (2024-11-29) ------------------------ Bugfixes ^^^^^^^^ - Restore support for pkginfo 1.11 (`#1116 `_) Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^ - Username for PyPI and Test PyPI now defaults to __token__ but no longer overrides a username configured in the environment or supplied on the command line. Workflows still supplying anything other than __token__ for the username when uploading to PyPI or Test PyPI will now fail. Either supply __token__ or do not supply a username at all. (`#1121 `_) Misc ^^^^ - `#1024 `_ Twine 5.1.1 (2024-06-26) ------------------------ Bugfixes ^^^^^^^^ - Resolve DeprecationWarnings when extracting ``twine`` metadata. (`#1115 `_) - Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (`#fix-repo-urls-with-auth-and-port `_) Twine 5.1.0 (2024-05-15) ------------------------ Features ^^^^^^^^ - Add the experimental ``--attestations`` flag. (`#1095 `_) Twine 5.1.0 (2024-05-15) ------------------------ Misc ^^^^ - `#1104 `_ Twine 5.0.0 (2024-02-10) ------------------------ Bugfixes ^^^^^^^^ - Use ``email.message`` instead of ``cgi`` as ``cgi`` has been deprecated (`#969 `_) Features ^^^^^^^^ - Remove support for usernames other than ``__token__`` when uploading to PyPI and TestPyPI (`#1040 `_) Misc ^^^^ - `#931 `_, `#991 `_, `#1028 `_ Twine 4.0.2 (2022-11-30) ------------------------ Bugfixes ^^^^^^^^ - Remove deprecated function to fix ``twine check`` with pkginfo 1.9.0. (`#941 `_) Twine 4.0.1 (2022-06-01) ------------------------ Bugfixes ^^^^^^^^ - Improve logging when keyring fails. (`#890 `_) - Reconfigure root logger to show all log messages. (`#896 `_) Twine 4.0.0 (2022-03-31) ------------------------ Features ^^^^^^^^ - Drop support for Python 3.6. (`#869 `_) - Use Rich to add color to ``upload`` output. (`#851 `_) - Use Rich to add color to ``check`` output. (`#874 `_) - Use Rich instead of tqdm for upload progress bar. (`#877 `_) Bugfixes ^^^^^^^^ - Remove Twine's dependencies from the ``User-Agent`` header when uploading. (`#871 `_) - Improve detection of disabled BLAKE2 hashing due to FIPS mode. (`#879 `_) - Restore warning for missing ``long_description``. (`#887 `_) Twine 3.8.0 (2022-02-02) ------------------------ Features ^^^^^^^^ - Add ``--verbose`` logging for querying keyring credentials. (`#849 `_) - Log all upload responses with ``--verbose``. (`#859 `_) - Show more helpful error message for invalid metadata. (`#861 `_) Bugfixes ^^^^^^^^ - Require a recent version of urllib3. (`#858 `_) Twine 3.7.1 (2021-12-07) ------------------------ Improved Documentation ^^^^^^^^^^^^^^^^^^^^^^ - Fix broken link to packaging tutorial. (`#844 `_) Twine 3.7.0 (2021-12-01) ------------------------ Features ^^^^^^^^ - Add support for core metadata version 2.2, defined in PEP 643. (`#833 `_) Twine 3.6.0 (2021-11-10) ------------------------ Features ^^^^^^^^ - Add support for Python 3.10. (`#827 `_) Twine 3.5.0 (2021-11-02) ------------------------ Features ^^^^^^^^ - Show more helpful messages for invalid passwords. (`#815 `_) - Allow the ``--skip-existing`` option to work with GCP Artifact Registry. (`#823 `_) Bugfixes ^^^^^^^^ - Add a helpful error message when an upload fails due to missing a trailing slash in the URL. (`#812 `_) - Generalize ``--verbose`` suggestion when an upload fails. (`#817 `_) Twine 3.4.2 (2021-07-20) ------------------------ Bugfixes ^^^^^^^^ - Improve error message for unsupported metadata. (`#755 `_) - Improve error message for a missing config file. (`#770 `_) - Do not include md5_digest or blake2_256_digest if FIPS mode is enabled on the host. This removes those fields from the metadata before sending the metadata to the repository. (`#776 `_) Twine 3.4.1 (2021-03-16) ------------------------ Bugfixes ^^^^^^^^ - Fix a regression that was causing some namespace packages with dots in them fail to upload to PyPI. (`#745 `_) Twine 3.4.0 (2021-03-15) ------------------------ Features ^^^^^^^^ - Prefer importlib.metadata for entry point handling. (`#728 `_) - Rely on importlib_metadata 3.6 for nicer entry point processing. (`#732 `_) - Eliminate dependency on setuptools/pkg_resources and replace with packaging and importlib_metadata. (`#736 `_) Twine 3.3.0 (2020-12-23) ------------------------ Features ^^^^^^^^ - Print files to be uploaded using ``upload --verbose`` (`#670 `_) - Print configuration file location when using ``upload --verbose`` (`#675 `_) - Print source and values of credentials when using ``upload --verbose`` (`#685 `_) - Add support for Python 3.9 (`#708 `_) - Turn warnings into errors when using ``check --strict`` (`#715 `_) Bugfixes ^^^^^^^^ - Make password optional when using ``upload --client-cert`` (`#678 `_) - Support more Nexus versions with ``upload --skip-existing`` (`#693 `_) - Support Gitlab Enterprise with ``upload --skip-existing`` (`#698 `_) - Show a better error message for malformed files (`#714 `_) Improved Documentation ^^^^^^^^^^^^^^^^^^^^^^ - Adopt PSF code of conduct (`#680 `_) - Adopt towncrier for the changleog (`#718 `_) Twine 3.2.0 (2020-06-24) ------------------------ Features ^^^^^^^^ - Improve display of HTTP errors during upload (`#666 `_) - Print packages and signatures to be uploaded when using ``--verbose`` option (`#652 `_) - Use red text when printing errors on the command line (`#649 `_) - Require repository URL scheme to be ``http`` or ``https`` (`#602 `_) - Add type annotations, checked with mypy, with :pep:`561` support for users of Twine's API (`#231 `_) Bugfixes ^^^^^^^^ - Update URL to ``.pypirc`` specification (`#655 `_) - Don't raise an exception when Python version can't be parsed from filename (`#612 `_) - Fix inaccurate retry message during ``upload`` (`#611 `_) - Clarify error messages for archive format (`#601 `_) Twine 3.1.1 (2019-11-27) ------------------------ Bugfixes ^^^^^^^^ - Restore ``--non-interactive`` as a flag not expecting an argument. (`#548 `_) Twine 3.1.0 (2019-11-23) ------------------------ Features ^^^^^^^^ - Add support for specifying ``--non-interactive`` as an environment variable. (`#547 `_) Twine 3.0.0 (2019-11-18) ------------------------ Features ^^^^^^^^ - When a client certificate is indicated, all password processing is disabled. (`#336 `_) - Add ``--non-interactive`` flag to abort upload rather than interactively prompt if credentials are missing. (`#489 `_) - Twine now unconditionally requires the keyring library and no longer supports uninstalling ``keyring`` as a means to disable that functionality. Instead, use ``keyring --disable`` keyring functionality if necessary. (`#524 `_) - Add Python 3.8 to classifiers. (`#518 `_) Bugfixes ^^^^^^^^ - More robust handling of server response in ``--skip-existing`` (`#332 `_) Twine 2.0.0 (2019-09-24) ------------------------ Features ^^^^^^^^ - Twine now requires Python 3.6 or later. Use pip 9 or pin to "twine<2" to install twine on older Python versions. (`#437 `_) Bugfixes ^^^^^^^^ - Require requests 2.20 or later to avoid reported security vulnerabilities in earlier releases. (`#491 `_) Twine 1.15.0 (2019-09-17) ------------------------- Features ^^^^^^^^ - Improved output on ``check`` command: Prints a message when there are no distributions given to check. Improved handling of errors in a distribution's markup, avoiding messages flowing through to the next distribution's errors. (`#488 `_) Twine 1.14.0 (2019-09-06) ------------------------- Features ^^^^^^^^ - Show Warehouse URL after uploading a package (`#459 `_) - Better error handling and gpg2 fallback if gpg not available. (`#456 `_) - Now provide a more meaningful error on redirect during upload. (`#310 `_) Bugfixes ^^^^^^^^ - Fail more gracefully when encountering bad metadata (`#341 `_) Twine 1.13.0 (2019-02-13) ------------------------- Features ^^^^^^^^ - Add disable_progress_bar option to disable tqdm. (`#427 `_) - Allow defining an empty username and password in .pypirc. (`#426 `_) - Support keyring.get_credential. (`#419 `_) - Support keyring.get_username_and_password. (`#418 `_) - Add Python 3.7 to classifiers. (`#416 `_) Bugfixes ^^^^^^^^ - Restore prompts while retaining support for suppressing prompts. (`#452 `_) - Avoid requests-toolbelt to 0.9.0 to prevent attempting to use openssl when it isn't available. (`#447 `_) - Use io.StringIO instead of StringIO. (`#444 `_) - Only install pyblake2 if needed. (`#441 `_) - Use modern Python language features. (`#436 `_) - Specify python_requires in setup.py (`#435 `_) - Use https URLs everywhere. (`#432 `_) - Fix --skip-existing for Nexus Repos. (`#428 `_) - Remove unnecessary usage of readme_render.markdown. (`#421 `_) - Don't crash if there's no package description. (`#412 `_) - Fix keyring support. (`#408 `_) Misc ^^^^ - Refactor tox env and travis config. (`#439 `_) Twine 1.12.1 (2018-09-24) ------------------------- Bugfixes ^^^^^^^^ - Fix regression with upload exit code (`#404 `_) Twine 1.12.0 (2018-09-24) ------------------------- Features ^^^^^^^^ - Add ``twine check`` command to check long description (`#395 `_) - Drop support for Python 3.3 (`#392 `_) - Empower ``--skip-existing`` for Artifactory repositories (`#363 `_) Bugfixes ^^^^^^^^ - Avoid MD5 when Python is compiled in FIPS mode (`#367 `_) Twine 1.11.0 (2018-03-19) ------------------------- Features ^^^^^^^^ - Remove PyPI as default ``register`` package index. (`#320 `_) - Support Metadata 2.1 (:pep:`566`), including Markdown for ``description`` fields. (`#319 `_) Bugfixes ^^^^^^^^ - Raise exception if attempting upload to deprecated legacy PyPI URLs. (`#322 `_) - Avoid uploading to PyPI when given alternate repository URL, and require ``http://`` or ``https://`` in ``repository_url``. (`#269 `_) Misc ^^^^ - `Update PyPI URLs `_. (`#318 `_) - Add new maintainer, release checklists. (`#314 `_) - Add instructions on how to use keyring. (`#277 `_) Twine 1.10.0 (2018-03-07) ------------------------- Features ^^^^^^^^ - Link to changelog from ``README`` (`#46 `_) - Reorganize & improve user & developer documentation. (`#304 `_) - Revise docs predicting future of ``twine`` (`#303 `_) - Add architecture overview to docs (`#296 `_) - Add doc building instructions (`#295 `_) - Declare support for Python 3.6 (`#257 `_) - Improve progressbar (`#256 `_) Bugfixes ^^^^^^^^ - Degrade gracefully when keyring is unavailable (`#315 `_) - Fix changelog formatting (`#299 `_) - Fix syntax highlighting in ``README`` (`#298 `_) - Fix Read the Docs, tox, Travis configuration (`#297 `_) - Fix Travis CI and test configuration (`#286 `_) - Print progress to ``stdout``, not ``stderr`` (`#268 `_) - Fix ``--repository[-url]`` help text (`#265 `_) - Remove obsolete registration guidance (`#200 `_) Twine 1.9.1 (2017-05-27) ------------------------ Bugfixes ^^^^^^^^ - Blacklist known bad versions of Requests. (`#253 `_) Twine 1.9.0 (2017-05-22) ------------------------ Bugfixes ^^^^^^^^ - Twine sends less information about the user's system in the User-Agent string. (`#229 `_) - Fix ``--skip-existing`` when used to upload a package for the first time. (`#220 `_) - Fix precedence of ``--repository-url`` over ``--repository``. (`#206 `_) Misc ^^^^ - Twine will now resolve passwords using the `keyring `_ if available. Module can be required with the ``keyring`` extra. - Twine will use ``hashlib.blake2b`` on Python 3.6+ instead of pyblake2 Twine 1.8.1 (2016-08-09) ------------------------ Misc ^^^^ - Check if a package exists if the URL is one of: * ``https://pypi.python.org/pypi/`` * ``https://upload.pypi.org/`` * ``https://upload.pypi.io/`` This helps people with ``https://upload.pypi.io`` still in their :file:`.pypirc` file. Twine 1.8.0 (2016-08-08) ------------------------ Features ^^^^^^^^ - Switch from upload.pypi.io to upload.pypi.org. (`#201 `_) - Retrieve configuration from the environment as a default. (`#144 `_) * Repository URL will default to ``TWINE_REPOSITORY`` * Username will default to ``TWINE_USERNAME`` * Password will default to ``TWINE_PASSWORD`` - Allow the Repository URL to be provided on the command-line (``--repository-url``) or via an environment variable (``TWINE_REPOSITORY_URL``). (`#166 `_) - Generate Blake2b 256 digests for packages *if* ``pyblake2`` is installed. Users can use ``python -m pip install twine[with-blake2]`` to have ``pyblake2`` installed with Twine. (`#171 `_) Misc ^^^^ - Generate SHA256 digest for all packages by default. - Stop testing on Python 2.6. - Warn users if they receive a 500 error when uploading to ``*pypi.python.org`` (`#199 `_) Twine 1.7.4 (2016-07-09) ------------------------ Bugfixes ^^^^^^^^ - Correct a packaging error. Twine 1.7.3 (2016-07-08) ------------------------ Bugfixes ^^^^^^^^ - Fix uploads to instances of pypiserver using ``--skip-existing``. We were not properly checking the return status code on the response after attempting an upload. (`#195 `_) Misc ^^^^ - Avoid attempts to upload a package if we can find it on Legacy PyPI. Twine 1.7.2 (2016-07-05) ------------------------ Bugfixes ^^^^^^^^ - Fix issue where we were checking the existence of packages even if the user didn't specify ``--skip-existing``. (`#189 `_) (`#191 `_) Twine 1.7.1 (2016-07-05) ------------------------ Bugfixes ^^^^^^^^ - Clint was not specified in the wheel metadata as a dependency. (`#187 `_) Twine 1.7.0 (2016-07-04) ------------------------ Features ^^^^^^^^ - Support ``--cert`` and ``--client-cert`` command-line flags and config file options for feature parity with pip. This allows users to verify connections to servers other than PyPI (e.g., local package repositories) with different certificates. (`#142 `_) - Add progress bar to uploads. (`#152 `_) - Allow ``--skip-existing`` to work for 409 status codes. (`#162 `_) - Implement retries when the CDN in front of PyPI gives us a 5xx error. (`#167 `_) - Switch Twine to upload to pypi.io instead of pypi.python.org. (`#177 `_) Bugfixes ^^^^^^^^ - Allow passwords to have ``%``\ s in them. (`#186 `_) Twine 1.6.5 (2015-12-16) ------------------------ Bugfixes ^^^^^^^^ - Bump requests-toolbelt version to ensure we avoid ConnectionErrors (`#155 `_) Twine 1.6.4 (2015-10-27) ------------------------ Bugfixes ^^^^^^^^ - Paths with hyphens in them break the Wheel regular expression. (`#145 `_) - Exception while accessing the ``repository`` key (sic) when raising a redirect exception. (`#146 `_) Twine 1.6.3 (2015-10-05) ------------------------ Bugfixes ^^^^^^^^ - Fix uploading signatures causing a 500 error after large file support was added. (`#137 `_, `#140 `_) Twine 1.6.2 (2015-09-28) ------------------------ Bugfixes ^^^^^^^^ - Upload signatures with packages appropriately (`#132 `_) As part of the refactor for the 1.6.0 release, we were using the wrong name to find the signature file. This also uncovered a bug where if you're using twine in a situation where ``*`` is not expanded by your shell, we might also miss uploading signatures to PyPI. Both were fixed as part of this. Twine 1.6.1 (2015-09-18) ------------------------ Bugfixes ^^^^^^^^ - Fix signing support for uploads (`#130 `_) Twine 1.6.0 (2015-09-14) ------------------------ Features ^^^^^^^^ - Allow the user to specify the location of their :file:`.pypirc` (`#97 `_) - Support registering new packages with ``twine register`` (`#8 `_) - Add the ``--skip-existing`` flag to ``twine upload`` to allow users to skip releases that already exist on PyPI. (`#115 `_) - Upload wheels first to PyPI (`#106 `_) - Large file support via the ``requests-toolbelt`` (`#104 `_) Bugfixes ^^^^^^^^ - Raise an exception on redirects (`#92 `_) - Work around problems with Windows when using ``getpass.getpass`` (`#116 `_) - Warnings triggered by pkginfo searching for ``PKG-INFO`` files should no longer be user visible. (`#114 `_) - Provide more helpful messages if :file:`.pypirc` is out of date. (`#111 `_) Twine 1.5.0 (2015-03-10) ------------------------ Features ^^^^^^^^ - Support commands not named "gpg" for signing (`#29 `_) Bugfixes ^^^^^^^^ - Display information about the version of setuptools installed (`#85 `_) - Support deprecated pypirc file format (`#61 `_) Misc ^^^^ - Add lower-limit to requests dependency Twine 1.4.0 (2014-12-12) ------------------------ Features ^^^^^^^^ - Switch to a git style dispatching for the commands to enable simpler commands and programmatic invocation. (`#6 `_) - Parse :file:`~/.pypirc` ourselves and use ``subprocess`` instead of the ``distutils.spawn`` module. (`#13 `_) Bugfixes ^^^^^^^^ - Expand globs and check for existence of dists to upload (`#65 `_) - Fix issue uploading packages with ``_``\ s in the name (`#47 `_) - List registered commands in help text (`#34 `_) - Use ``pkg_resources`` to load registered commands (`#32 `_) - Prevent ResourceWarning from being shown (`#28 `_) - Add support for uploading Windows installers (`#26 `_) Twine 1.3.0 (2014-03-31) ------------------------ Features ^^^^^^^^ - Additional functionality. Twine 1.2.2 (2013-10-03) ------------------------ Features ^^^^^^^^ - Basic functionality. ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/conf.py0000644000175100017510000002344315231700043014542 0ustar00runnerrunner# twine documentation build configuration file, created by # sphinx-quickstart on Tue Aug 13 11:51:54 2013. # # This file is execfile()d with the current directory set to its containing # dir. # # Note that not all possible configuration values are present in this # autogenerated file. # # All configuration values have a default; values that are commented out # serve to show the default. # import sys # import os # If extensions (or modules to document with autodoc) are in another directory, # add these directories to sys.path here. If the directory is relative to the # documentation root, use os.path.abspath to make it absolute, like shown here. # sys.path.insert(0, os.path.abspath('.')) # sys.path.insert(0, os.path.abspath(os.pardir)) import twine # -- General configuration ---------------------------------------------------- # If your documentation needs a minimal Sphinx version, state it here. needs_sphinx = "1.7.0" # Add any Sphinx extension module names here, as strings. They can be # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom ones. extensions = [ "sphinx.ext.autodoc", "sphinx.ext.doctest", "sphinx.ext.intersphinx", "sphinx.ext.coverage", "sphinx.ext.viewcode", "sphinxcontrib.programoutput", ] # Add any paths that contain templates here, relative to this directory. templates_path = ["_templates"] # The suffix of source filenames. source_suffix = ".rst" # The encoding of source files. # source_encoding = 'utf-8-sig' # The master toctree document. master_doc = "index" # General information about the project. project = "twine" copyright = "2019, Donald Stufft and individual contributors" # The version info for the project you're documenting, acts as replacement for # |version| and |release|, also used in various other places throughout the # built documents. # # The short X.Y version. version = ".".join(twine.__version__.split(".")[:2]) # The full version, including alpha/beta/rc tags. release = twine.__version__ # The language for content autogenerated by Sphinx. Refer to documentation # for a list of supported languages. # language = None # There are two options for replacing |today|: either, you set today to some # non-false value, then it is used: # today = '' # Else, today_fmt is used as the format for a strftime call. # today_fmt = '%B %d, %Y' # List of patterns, relative to source directory, that match files and # directories to ignore when looking for source files. exclude_patterns = ["_build"] # The reST default role (used for this markup: `text`) to use for all documents # default_role = None # If true, '()' will be appended to :func: etc. cross-reference text. # add_function_parentheses = True # If true, the current module name will be prepended to all description # unit titles (such as .. function::). # add_module_names = True # If true, sectionauthor and moduleauthor directives will be shown in the # output. They are ignored by default. # show_authors = False # The name of the Pygments (syntax highlighting) style to use. # pygments_style = "sphinx" # A list of ignored prefixes for module index sorting. # modindex_common_prefix = [] # -- Options for HTML output -------------------------------------------------- # The theme to use for HTML and HTML Help pages. See the documentation for # a list of builtin themes. html_theme = "furo" # Theme options are theme-specific and customize the look and feel of a theme # further. For a list of options available for each theme, see the # documentation. # html_theme_options = {} # Add any paths that contain custom themes here, relative to this directory. # html_theme_path = [] # The name for this set of Sphinx documents. If None, it defaults to # " v documentation". # html_title = None # A shorter title for the navigation bar. Default is the same as html_title. # html_short_title = None # The name of an image file (relative to this directory) to place at the top # of the sidebar. # html_logo = None # The name of an image file (within the static path) to use as favicon of the # docs. This file should be a Windows icon file (.ico) being 16x16 or 32x32 # pixels large. # html_favicon = None # Add any paths that contain custom static files (such as style sheets) here, # relative to this directory. They are copied after the builtin static files, # so a file named "default.css" will overwrite the builtin "default.css". # html_static_path = ["_static"] # If not '', a 'Last updated on:' timestamp is inserted at every page bottom, # using the given strftime format. # html_last_updated_fmt = '%b %d, %Y' # If true, SmartyPants will be used to convert quotes and dashes to # typographically correct entities. # html_use_smartypants = True # Custom sidebar templates, maps document names to template names. # html_sidebars = {} # Additional templates that should be rendered to pages, maps page names to # template names. # html_additional_pages = {} # If false, no module index is generated. # html_domain_indices = True # If false, no index is generated. # html_use_index = True # If true, the index is split into individual pages for each letter. # html_split_index = False # If true, links to the reST sources are added to the pages. # html_show_sourcelink = True # If true, "Created using Sphinx" is shown in the HTML footer. Default is True. # html_show_sphinx = True # If true, "(C) Copyright ..." is shown in the HTML footer. Default is True. # html_show_copyright = True # If true, an OpenSearch description file will be output, and all pages will # contain a tag referring to it. The value of this option must be the # base URL from which the finished HTML is served. # html_use_opensearch = '' # This is the file name suffix for HTML files (e.g. ".xhtml"). # html_file_suffix = None # Output file base name for HTML help builder. htmlhelp_basename = "twinedoc" # -- Options for LaTeX output ------------------------------------------------- latex_elements = { # The paper size ('letterpaper' or 'a4paper'). # 'papersize': 'letterpaper', # The font size ('10pt', '11pt' or '12pt'). # 'pointsize': '10pt', # Additional stuff for the LaTeX preamble. # 'preamble': '', } # Grouping the document tree into LaTeX files. List of tuples # (source start file, target name, title, author, documentclass [howto/manual]) latex_documents = [ ( "index", "twine.tex", "Twine Documentation", "Donald Stufft and individual contributors", "manual", ), ] # The name of an image file (relative to this directory) to place at the top of # the title page. # latex_logo = None # For "manual" documents, if this is true, then toplevel headings are parts, # not chapters. # latex_use_parts = False # If true, show page references after internal links. # latex_show_pagerefs = False # If true, show URL addresses after external links. # latex_show_urls = False # Documents to append as an appendix to all manuals. # latex_appendices = [] # If false, no module index is generated. # latex_domain_indices = True # -- Options for manual page output ------------------------------------------- # One entry per manual page. List of tuples # (source start file, name, description, authors, manual section). man_pages = [ ( "index", "twine", "twine Documentation", ["Donald Stufft", "Individual contributors"], 1, ), ] # If true, show URL addresses after external links. # man_show_urls = False # -- Options for Texinfo output ----------------------------------------------- # Grouping the document tree into Texinfo files. List of tuples # (source start file, target name, title, author, # dir menu entry, description, category) texinfo_documents = [ ( "index", "twine", "twine Documentation", "Donald Stufft and individual contributors", "twine", "One line description of project.", "Miscellaneous", ), ] # Documents to append as an appendix to all manuals. # texinfo_appendices = [] # If false, no module index is generated. # texinfo_domain_indices = True # How to display URL addresses: 'footnote', 'no', or 'inline'. # texinfo_show_urls = 'footnote' # See https://www.sphinx-doc.org/en/master/usage/configuration.html#confval-linkcheck_ignore linkcheck_ignore = [ r"https?://127\.0\.0\.1.*", # Avoid errors due to GitHub rate limit # https://github.com/sphinx-doc/sphinx/issues/7388 r"https://github\.com/pypa/twine/issues/.*", # Avoid errors from channels interpreted as anchors r"https://web\.libera\.chat/#", # Avoid error from InvalidPyPIUploadURL docstring r"https://upload\.pypi\.org/legacy/?", # Avoid errors from 403/Login Redirects r"https://(test\.)?pypi\.org/manage/project/twine/collaboration/?", r"https://pypi\.org/manage/project/twine/collaboration/?", # PyPI uses
anchor links that are not understood by # linkcheck. Ignore these link targets in the check until they are # supported. Maybe use linkcheck_anchors_ignore_for_url configuration # option once Sphinx 7.1 or later is used, see # https://www.sphinx-doc.org/en/master/usage/configuration.html#confval-linkcheck_anchors_ignore_for_url r"https://pypi\.org/project/[^/]+/\#", ] intersphinx_mapping = { "python": ("https://docs.python.org/3", None), "requests": ("https://requests.readthedocs.io/en/latest/", None), "packaging": ("https://packaging.pypa.io/en/latest/", None), } # Be strict about the invalid references: nitpicky = True # -- Options for apidoc output ------------------------------------------------ autodoc_default_options = { "members": True, "private-members": True, "undoc-members": True, "member-order": "bysource", } autodoc_class_signature = "separated" autodoc_preserve_defaults = True # autodoc_typehints = "both" # autodoc_typehints_description_target = "documented" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/contributing.rst0000644000175100017510000002310315231700043016475 0ustar00runnerrunnerContributing ============ We are happy you have decided to contribute to Twine. Please see `the GitHub repository`_ for code and more documentation, and the `official Python Packaging User Guide`_ for user documentation. To ask questions or get involved, you can join the `Python Packaging Discourse forum`_, ``#pypa`` or ``#pypa-dev`` on `IRC`_, or the `distutils-sig mailing list`_. Everyone interacting in the Twine project's codebases, issue trackers, chat rooms, and mailing lists is expected to follow the `PSF Code of Conduct`_. Getting started --------------- We use `tox`_ to run tests, check code style, and build the documentation. To install ``tox``, run: .. code-block:: bash python3 -m pip install tox Clone the twine repository from GitHub, then run: .. code-block:: bash cd /path/to/your/local/twine tox -e dev This creates a `virtual environment`_, so that twine and its dependencies do not interfere with other packages installed on your machine. In the virtual environment, ``twine`` is pointing at your local copy, so when you make changes, you can easily see their effect. The virtual environment also contains the tools for running tests and checking code style, so you can run them on single files directly or in your code editor. However, we still encourage using the ``tox`` commands below on the whole codebase. To use the virtual environment, run: .. code-block:: bash source venv/bin/activate Building the documentation ^^^^^^^^^^^^^^^^^^^^^^^^^^ Additions and edits to twine's documentation are welcome and appreciated. To preview the docs while you're making changes, run: .. code-block:: bash tox -e watch-docs Then open a web browser to ``_. When you're done making changes, lint and build the docs locally before making a pull request. In your active virtual environment, run: .. code-block:: bash tox -e docs The HTML of the docs will be written to :file:`docs/_build/html`. Code style ^^^^^^^^^^ To automatically reformat your changes with `isort`_ and `black`_, run: .. code-block:: bash tox -e format To detect any remaining code smells with `flake8`_, run: .. code-block:: bash tox -e lint To perform strict type-checking using `mypy`_, run: .. code-block:: bash tox -e types Any errors from ``lint`` or ``types`` need to be fixed manually. Additionally, we prefer that ``import`` statements be used for packages and modules only, rather than individual classes or functions. Testing ^^^^^^^ We use `pytest`_ for writing and running tests. To run the tests in your virtual environment, run: .. code-block:: bash tox -e py To pass options to ``pytest``, e.g. the name of a test, run: .. code-block:: bash tox -e py -- tests/test_upload.py::test_exception_for_http_status Twine is continuously tested against supported versions of Python using `GitHub Actions`_. To run the tests against a specific version, e.g. Python 3.8, you will need it installed on your machine. Then, run: .. code-block:: bash tox -e py38 To run the "integration" tests of uploading to real package indexes, run: .. code-block:: bash tox -e integration To run the tests against all supported Python versions, check code style, and build the documentation, run: .. code-block:: bash tox Submitting changes ------------------ 1. Fork `the GitHub repository`_. 2. Make a branch off of ``main`` and commit your changes to it. 3. Run the tests, check code style, and build the docs as described above. 4. Optionally, add your name to the end of the :file:`AUTHORS` file using the format ``Name (url)``, where the ``(url)`` portion is optional. 5. Submit a pull request to the ``main`` branch on GitHub, referencing an open issue. 6. Add a changelog entry. Changelog entries ^^^^^^^^^^^^^^^^^ The ``docs/changelog.rst`` file is built by `towncrier`_ from files in the ``changelog/`` directory. To add an entry, create a file in that directory named ``{number}.{type}.rst``, where ``{number}`` is the pull request number, and ``{type}`` is ``feature``, ``bugfix``, ``doc``, ``removal``, or ``misc``. For example, if your PR number is 1234 and it's fixing a bug, then you would create ``changelog/1234.bugfix.rst``. PRs can span multiple categories by creating multiple files: if you added a feature and deprecated/removed an old feature in PR #5678, you would create ``changelog/5678.feature.rst`` and ``changelog/5678.removal.rst``. A changelog entry is meant for end users and should only contain details relevant to them. In order to maintain a consistent style, please keep the entry to the point, in sentence case, shorter than 80 characters, and in an imperative tone. An entry should complete the sentence "This change will ...". If one line is not enough, use a summary line in an imperative tone, followed by a description of the change in one or more paragraphs, each wrapped at 80 characters and separated by blank lines. You don't need to reference the pull request or issue number in a changelog entry, since towncrier will add a link using the number in the file name, and the pull request should reference an issue number. Similarly, you don't need to add your name to the entry, since that will be associated with the pull request. Changelog entries are rendered using `reStructuredText`_, but they should only have minimal formatting (such as ````monospaced text````). .. _`towncrier`: https://pypi.org/project/towncrier/ .. _`reStructuredText`: https://www.writethedocs.org/guide/writing/reStructuredText/ Architectural overview ---------------------- Twine is a command-line tool for interacting with PyPI securely over HTTPS. Its three purposes are to be: 1. A user-facing tool for publishing on pypi.org 2. A user-facing tool for publishing on other Python package indexes (e.g., ``devpi`` instances) 3. A useful API for other programs (e.g., ``zest.releaser``) to call for publishing on any Python package index Currently, twine has two principal functions: uploading new packages and registering new `projects`_ (``register`` is no longer supported on PyPI, and is in Twine for use with other package indexes). Its command line arguments are parsed in :file:`twine/cli.py`. The code for registering new projects is in :file:`twine/commands/register.py`, and the code for uploading is in :file:`twine/commands/upload.py`. The file :file:`twine/package.py` contains a single class, ``PackageFile``, which hashes the project files and extracts their metadata. The file :file:`twine/repository.py` contains the ``Repository`` class, whose methods control the URL the package is uploaded to (which the user can specify either as a default, in the :file:`.pypirc` file, or pass on the command line), and the methods that upload the package securely to a URL. For more details, refer to the source documentation (currently a `work in progress `_): .. toctree:: internal/twine Where Twine gets configuration and credentials ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ A user can set the repository URL, username, and/or password via command line, ``.pypirc`` files, environment variables, and ``keyring``. Adding a maintainer ------------------- A checklist for adding a new maintainer to the project. #. Add them as a Member in the GitHub repo settings. #. Get them Test PyPI and canon PyPI usernames and add them as a Maintainer on `our Test PyPI project `_ and `canon PyPI `_. Making a new release -------------------- A checklist for creating, testing, and distributing a new version. #. Choose a version number, and create a new branch .. code-block:: bash VERSION=3.4.2 git switch -c release-$VERSION #. Update :file:`docs/changelog.rst` .. code-block:: bash tox -e changelog -- --version $VERSION git commit -am "Update changelog for $VERSION" #. Open a pull request for review #. Merge the pull request, and ensure the `GitHub Actions`_ build passes #. Create a new git tag for the version .. code-block:: bash git switch main git pull --ff-only upstream main git tag -m "Release v$VERSION" $VERSION #. Push to start the release, and watch it in `GitHub Actions`_ .. code-block:: bash git push upstream $VERSION #. View the new release on `PyPI`_ Future development ------------------ See our `open issues`_. In the future, ``pip`` and ``twine`` may merge into a single tool; see `ongoing discussion `_. .. _`official Python Packaging User Guide`: https://packaging.python.org/tutorials/packaging-projects/ .. _`the GitHub repository`: https://github.com/pypa/twine .. _`Python Packaging Discourse forum`: https://discuss.python.org/c/packaging/ .. _`IRC`: https://web.libera.chat/#pypa-dev,#pypa .. _`distutils-sig mailing list`: https://mail.python.org/mailman3/lists/distutils-sig.python.org/ .. _`PSF Code of Conduct`: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md .. _`virtual environment`: https://packaging.python.org/guides/installing-using-pip-and-virtual-environments/ .. _`tox`: https://tox.readthedocs.io/ .. _`pytest`: https://docs.pytest.org/ .. _`GitHub Actions`: https://github.com/pypa/twine/actions .. _`isort`: https://timothycrosley.github.io/isort/ .. _`black`: https://black.readthedocs.io/ .. _`flake8`: https://flake8.pycqa.org/ .. _`mypy`: https://mypy.readthedocs.io/ .. _`projects`: https://packaging.python.org/glossary/#term-Project .. _`open issues`: https://github.com/pypa/twine/issues .. _`PyPI`: https://pypi.org/project/twine/ ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/index.rst0000644000175100017510000002077515231700043015111 0ustar00runnerrunner.. twine documentation master file, originally created by sphinx-quickstart on Tue Aug 13 11:51:54 2013. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive. .. toctree:: :hidden: :maxdepth: 3 changelog contributing Code of Conduct PyPI Project GitHub Repository Python Packaging Tutorial Twine ===== Twine is a utility for `publishing`_ Python packages to `PyPI`_ and other `repositories`_. It provides build system independent uploads of source and binary `distribution artifacts `_ for both new and existing `projects`_. Why Should I Use This? ---------------------- The goal of Twine is to improve PyPI interaction by improving security and testability. The biggest reason to use Twine is that it securely authenticates you to PyPI over HTTPS using a verified connection, regardless of the underlying Python version. Meanwhile, ``python setup.py upload`` will only work correctly and securely if your build system, Python version, and underlying operating system are configured properly. Secondly, Twine encourages you to build your distribution files. ``python setup.py upload`` only allows you to upload a package as a final step after building with ``distutils`` or ``setuptools``, within the same command invocation. This means that you cannot test the exact file you're going to upload to PyPI to ensure that it works before uploading it. Finally, Twine allows you to pre-sign your files and pass the ``.asc`` files into the command line invocation (``twine upload myproject-1.0.1.tar.gz myproject-1.0.1.tar.gz.asc``). This enables you to be assured that you're typing your ``gpg`` passphrase into ``gpg`` itself and not anything else, since *you* will be the one directly executing ``gpg --detach-sign -a ``. Features -------- - Verified HTTPS connections - Uploading doesn't require executing ``setup.py`` - Uploading files that have already been created, allowing testing of distributions before release - Supports uploading any packaging format (including `wheels`_) Installation ------------ .. code-block:: bash pip install twine Using Twine ----------- 1. Create some distributions in the normal way: .. code-block:: bash python -m build 2. Upload to `Test PyPI`_ and verify things look right: .. code-block:: bash twine upload -r testpypi dist/* Twine will prompt for your username and password. 3. Upload to `PyPI`_: .. code-block:: bash twine upload dist/* 4. Done! .. _entering-credentials: .. note:: Like many other command line tools, Twine does not show any characters when you enter your password. If you're using Windows and trying to paste your username, password, or token in the Command Prompt or PowerShell, ``Ctrl-V`` and ``Shift+Insert`` won't work. Instead, you can use "Edit > Paste" from the window menu, or enable "Use Ctrl+Shift+C/V as Copy/Paste" in "Properties". This is a `known issue `_ with Python's ``getpass`` module. More documentation on using Twine to upload packages to PyPI is in the `Python Packaging User Guide`_. Commands -------- ``twine upload`` ^^^^^^^^^^^^^^^^ Uploads one or more distributions to a repository. .. program-output:: twine upload -h ``twine check`` ^^^^^^^^^^^^^^^ Checks whether your distribution's long description will render correctly on PyPI. .. program-output:: twine check -h ``twine register`` ^^^^^^^^^^^^^^^^^^ Pre-register a name with a repository before uploading a distribution. .. warning:: Pre-registration is `not supported on PyPI`_, so the ``register`` command is only necessary if you are using a different repository that requires it. See `issue #1627 on Warehouse`_ (the software running on PyPI) for more details. .. program-output:: twine register -h Configuration ------------- Twine can read repository configuration from a ``.pypirc`` file, either in your home directory, or provided with the ``--config-file`` option. For details on writing and using ``.pypirc``, see the `specification `_ in the Python Packaging User Guide. Environment Variables ^^^^^^^^^^^^^^^^^^^^^ Twine also supports configuration via environment variables. Options passed on the command line will take precedence over options set via environment variables. Definition via environment variable is helpful in environments where it is not convenient to create a ``.pypirc`` file (for example, on a CI/build server). * ``TWINE_USERNAME`` - the username to use for authentication to the repository. * ``TWINE_PASSWORD`` - the password to use for authentication to the repository. * ``TWINE_REPOSITORY`` - the repository configuration, either defined as a section in ``.pypirc`` or provided as a full URL. * ``TWINE_REPOSITORY_URL`` - the repository URL to use. * ``TWINE_CERT`` - custom CA certificate to use for repositories with self-signed or untrusted certificates. * ``TWINE_NON_INTERACTIVE`` - Do not interactively prompt for username/password if the required credentials are missing. Proxy Support ^^^^^^^^^^^^^ Twine can be configured to use a proxy by setting environment variables. For example, to use a proxy for just the ``twine`` command, without ``export``-ing it for other tools: .. code-block:: bash HTTPS_PROXY=socks5://user:pass@host:port twine upload dist/* For more information, see the Requests documentation on :ref:`requests:proxies` and :ref:`requests:socks`, and `an in-depth article about proxy environment variables `_. Keyring Support --------------- Instead of typing in your password every time you upload a distribution, Twine allows storing a username and password securely using `keyring`_. Keyring is installed with Twine but for some systems (Linux mainly) may require `additional installation steps`_. Once Twine is installed, use the ``keyring`` program to set a username and password to use for each repository to which you may upload. For example, to set an API token for PyPI: .. code-block:: bash keyring set https://upload.pypi.org/legacy/ __token__ and paste your API key when prompted. For a different repository, replace the URL with the relevant repository URL. For example, for Test PyPI, use ``https://test.pypi.org/legacy/``. .. note:: If you are using Linux in a headless environment (such as on a server) you'll need to do some additional steps to ensure that Keyring can store secrets securely. See `Using Keyring on headless systems`_. Disabling Keyring ^^^^^^^^^^^^^^^^^ In most cases, simply not setting a password with ``keyring`` will allow Twine to fall back to prompting for a password. In some cases, the presence of Keyring will cause unexpected or undesirable prompts from the backing system. In these cases, it may be desirable to disable Keyring altogether. To disable Keyring, run: .. code-block:: bash keyring --disable See `Twine issue #338`_ for discussion and background. .. _`publishing`: https://packaging.python.org/tutorials/packaging-projects/ .. _`PyPI`: https://pypi.org .. _`Test PyPI`: https://packaging.python.org/guides/using-testpypi/ .. _`pypirc`: https://packaging.python.org/specifications/pypirc/ .. _`Python Packaging User Guide`: https://packaging.python.org/tutorials/packaging-projects/ .. _`keyring`: https://pypi.org/project/keyring/ .. _`Using Keyring on headless systems`: https://keyring.readthedocs.io/en/latest/#using-keyring-on-headless-linux-systems .. _`additional installation steps`: https://pypi.org/project/keyring/#installation-linux .. _`developer documentation`: https://twine.readthedocs.io/en/latest/contributing.html .. _`projects`: https://packaging.python.org/glossary/#term-Project .. _`distributions`: https://packaging.python.org/glossary/#term-Distribution-Package .. _`repositories`: https://packaging.python.org/glossary/#term-Package-Index .. _`PSF Code of Conduct`: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md .. _`Warehouse`: https://github.com/pypa/warehouse .. _`wheels`: https://packaging.python.org/glossary/#term-Wheel .. _`not supported on PyPI`: https://packaging.python.org/guides/migrating-to-pypi-org/#registering-package-names-metadata .. _`issue #1627 on Warehouse`: https://github.com/pypi/warehouse/issues/1627 .. _`Twine issue #338`: https://github.com/pypa/twine/issues/338 ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1785167912.496521 twine-7.0.0/docs/internal/0000755000175100017510000000000015231700050015047 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.auth.rst0000644000175100017510000000010015231700043017660 0ustar00runnerrunnertwine.auth module ================= .. automodule:: twine.auth ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.cli.rst0000644000175100017510000000007515231700043017501 0ustar00runnerrunnertwine.cli module ================ .. automodule:: twine.cli ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.commands.check.rst0000644000175100017510000000013615231700043021605 0ustar00runnerrunnertwine.commands.check module =========================== .. automodule:: twine.commands.check ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.commands.register.rst0000644000175100017510000000014715231700043022356 0ustar00runnerrunnertwine.commands.register module ============================== .. automodule:: twine.commands.register ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.commands.rst0000644000175100017510000000027115231700043020531 0ustar00runnerrunnertwine.commands package ====================== .. automodule:: twine.commands .. toctree:: :maxdepth: 4 twine.commands.check twine.commands.register twine.commands.upload ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.commands.upload.rst0000644000175100017510000000014115231700043022010 0ustar00runnerrunnertwine.commands.upload module ============================ .. automodule:: twine.commands.upload ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.exceptions.rst0000644000175100017510000000012215231700043021104 0ustar00runnerrunnertwine.exceptions module ======================= .. automodule:: twine.exceptions ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.package.rst0000644000175100017510000000011115231700043020314 0ustar00runnerrunnertwine.package module ==================== .. automodule:: twine.package ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.repository.rst0000644000175100017510000000012215231700043021142 0ustar00runnerrunnertwine.repository module ======================= .. automodule:: twine.repository ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.rst0000644000175100017510000000035015231700043016727 0ustar00runnerrunnertwine package ============= .. automodule:: twine .. toctree:: :maxdepth: 4 twine.commands twine.auth twine.cli twine.exceptions twine.package twine.repository twine.settings twine.utils twine.wheel ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.settings.rst0000644000175100017510000000011415231700043020564 0ustar00runnerrunnertwine.settings module ===================== .. automodule:: twine.settings ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.utils.rst0000644000175100017510000000010315231700043020062 0ustar00runnerrunnertwine.utils module ================== .. automodule:: twine.utils ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/internal/twine.wheel.rst0000644000175100017510000000010315231700043020026 0ustar00runnerrunnertwine.wheel module ================== .. automodule:: twine.wheel ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/docs/requirements.txt0000644000175100017510000000013715231700043016522 0ustar00runnerrunnerdoc8>=0.8.0 furo>=2021.10.09 readme-renderer>=17.4 Sphinx>=6 sphinxcontrib-programoutput>=0.17 ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/mypy.ini0000644000175100017510000000135615231700043014011 0ustar00runnerrunner[mypy] show_traceback = True ; --strict settings warn_redundant_casts = True warn_unused_configs = True warn_unused_ignores = True disallow_subclassing_any = True disallow_any_generics = True disallow_untyped_calls = True disallow_untyped_defs = True disallow_incomplete_defs = True check_untyped_defs = True disallow_untyped_decorators = True no_implicit_optional = True warn_return_any = True no_implicit_reexport = True strict_equality = True [mypy-requests_toolbelt,requests_toolbelt.*] ; https://github.com/requests/toolbelt/issues/279 ignore_missing_imports = True [mypy-rfc3986] ignore_missing_imports = True [mypy-urllib3] ; https://github.com/urllib3/urllib3/issues/867 ignore_missing_imports = True [mypy-tests.*] ignore_errors = True ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/pyproject.toml0000644000175100017510000000446215231700043015227 0ustar00runnerrunner# pyproject.toml [build-system] requires = ["setuptools>=77.0.3", "setuptools_scm[toml]>=6.0"] build-backend = "setuptools.build_meta" [project] name = "twine" authors = [ { name = "Donald Stufft and individual contributors", email = "donald@stufft.io" }, ] description = "Collection of utilities for publishing packages on PyPI" license = "Apache-2.0" license-files = ["LICENSE"] classifiers = [ "Intended Audience :: Developers", "Natural Language :: English", "Operating System :: MacOS :: MacOS X", "Operating System :: POSIX", "Operating System :: POSIX :: BSD", "Operating System :: POSIX :: Linux", "Operating System :: Microsoft :: Windows", "Programming Language :: Python", "Programming Language :: Python :: 3", "Programming Language :: Python :: 3 :: Only", "Programming Language :: Python :: 3.10", "Programming Language :: Python :: 3.11", "Programming Language :: Python :: 3.12", "Programming Language :: Python :: 3.13", "Programming Language :: Python :: 3.14", "Programming Language :: Python :: Implementation :: CPython", ] requires-python = ">=3.10" dependencies = [ "readme-renderer >= 35.0", "requests >= 2.20", "requests-toolbelt >= 0.8.0, != 0.9.0", "urllib3 >= 1.26.0", # workaround for missing binaries on these platforms, see #1158 "keyring >= 21.2.0; platform_machine != 'ppc64le' and platform_machine != 's390x'", "rfc3986 >= 1.4.0", "rich >= 14.3.3", "packaging >= 26.1", "id", ] dynamic = ["version"] [project.readme] file = "README.rst" content-type = "text/x-rst" [project.urls] Homepage = "https://twine.readthedocs.io/" Source = "https://github.com/pypa/twine/" Documentation = "https://twine.readthedocs.io/en/latest/" "Packaging tutorial" = "https://packaging.python.org/tutorials/packaging-projects/" [project.entry-points."twine.registered_commands"] check = "twine.commands.check:main" upload = "twine.commands.upload:main" register = "twine.commands.register:main" [project.optional-dependencies] keyring = ["keyring >= 21.2.0"] [project.scripts] twine = "twine.__main__:main" [tool.setuptools] packages = ["twine", "twine.commands"] include-package-data = true [tool.setuptools_scm] [tool.towncrier] package = "twine" filename = "docs/changelog.rst" directory = "changelog" issue_format = "`#{issue} `_" underlines = ["-", "^"] ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/pytest.ini0000644000175100017510000000050615231700043014337 0ustar00runnerrunner[pytest] filterwarnings= # workaround for https://github.com/mozilla/bleach/issues/425 ignore:Using or importing the ABCs:DeprecationWarning:bleach # workaround for https://github.com/pypa/setuptools/issues/479 ignore:the imp module is deprecated::setuptools addopts = --disable-socket --ignore-glob '*integration*.py' ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.5039773 twine-7.0.0/setup.cfg0000644000175100017510000000004615231700051014125 0ustar00runnerrunner[egg_info] tag_build = tag_date = 0 ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.4986923 twine-7.0.0/tests/0000755000175100017510000000000015231700050013445 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/__init__.py0000644000175100017510000000000015231700043015546 0ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/conftest.py0000644000175100017510000000376215231700043015656 0ustar00runnerrunnerimport getpass import logging.config import textwrap import pytest import rich from twine import settings from twine import utils @pytest.fixture(autouse=True) def configure_output(): """ Disable colored output and line wrapping before each test. Some tests (e.g. test_main.py) will end up calling (and making assertions based on) twine.cli.configure_output, which overrides this configuration. This fixture should prevent that leaking into subsequent tests. """ rich.reconfigure( no_color=True, color_system=None, emoji=False, highlight=False, width=500, ) logging.config.dictConfig( { "version": 1, "handlers": { "console": { "class": "logging.StreamHandler", } }, "loggers": { "twine": { "handlers": ["console"], }, }, } ) @pytest.fixture() def config_file(tmpdir, monkeypatch): path = tmpdir / ".pypirc" # Mimic common case of .pypirc in home directory monkeypatch.setattr(utils, "DEFAULT_CONFIG_FILE", path) return path @pytest.fixture def write_config_file(config_file): def _write(config): config_file.write(textwrap.dedent(config)) return config_file return _write @pytest.fixture() def make_settings(write_config_file): """Return a factory function for settings.Settings with defaults.""" default_config = """ [pypi] username:foo password:bar """ def _settings(config=default_config, **settings_kwargs): config_file = write_config_file(config) settings_kwargs.setdefault("sign_with", None) settings_kwargs.setdefault("config_file", config_file) return settings.Settings(**settings_kwargs) return _settings @pytest.fixture def entered_password(monkeypatch): monkeypatch.setattr(getpass, "getpass", lambda prompt: "entered pw") ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1785167912.499808 twine-7.0.0/tests/fixtures/0000755000175100017510000000000015231700050015316 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/deprecated-pypirc0000644000175100017510000000011315231700043020642 0ustar00runnerrunner[server-login] username:testusername password:testpassword [pypi] foo:bar ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/everything.metadata230000644000175100017510000000311015231700043021346 0ustar00runnerrunnerMetadata-Version: 2.3 Name: BeagleVote Version: 1.0a2 Platform: ObscureUnix Platform: RareDOS Supported-Platform: RedHat 7.2 Supported-Platform: i386-win32-2791 Summary: A module for collecting votes from beagles. Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM Keywords: dog,puppy,voting,election Home-page: http://www.example.com/~cschultz/bvote/ Download-URL: …/BeagleVote-0.45.tgz Author: C. Schultz, Universal Features Syndicate, Los Angeles, CA Author-email: "C. Schultz" Maintainer: C. Schultz, Universal Features Syndicate, Los Angeles, CA Maintainer-email: "C. Schultz" License: This software may only be obtained by sending the author a postcard, and then the user promises not to redistribute it. Classifier: Development Status :: 4 - Beta Classifier: Environment :: Console (Text Based) Provides-Extra: pdf Requires-Dist: reportlab; extra == 'pdf' Requires-Dist: pkginfo Requires-Dist: PasteDeploy Requires-Dist: zope.interface (>3.5.0) Requires-Dist: pywin32 >1.0; sys_platform == 'win32' Requires-Python: >=3 Requires-External: C Requires-External: libpng (>=1.5) Requires-External: make; sys_platform != "win32" Project-URL: Bug Tracker, http://bitbucket.org/tarek/distribute/issues/ Project-URL: Documentation, https://example.com/BeagleVote Provides-Dist: OtherProject Provides-Dist: AnotherProject (3.4) Provides-Dist: virtual_package; python_version >= "3.4" Dynamic: Obsoletes-Dist This description intentionally left blank. ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/everything.metadata240000644000175100017510000000325615231700043021362 0ustar00runnerrunnerMetadata-Version: 2.4 Name: BeagleVote Version: 1.0a2 Platform: ObscureUnix Platform: RareDOS Supported-Platform: RedHat 7.2 Supported-Platform: i386-win32-2791 Summary: A module for collecting votes from beagles. Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM Keywords: dog,puppy,voting,election Home-page: http://www.example.com/~cschultz/bvote/ Download-URL: …/BeagleVote-0.45.tgz Author: C. Schultz, Universal Features Syndicate, Los Angeles, CA Author-email: "C. Schultz" Maintainer: C. Schultz, Universal Features Syndicate, Los Angeles, CA Maintainer-email: "C. Schultz" License: This software may only be obtained by sending the author a postcard, and then the user promises not to redistribute it. License-Expression: Apache-2.0 OR BSD-2-Clause License-File: LICENSE.APACHE License-File: LICENSE.BSD Classifier: Development Status :: 4 - Beta Classifier: Environment :: Console (Text Based) Provides-Extra: pdf Requires-Dist: reportlab; extra == 'pdf' Requires-Dist: pkginfo Requires-Dist: PasteDeploy Requires-Dist: zope.interface (>3.5.0) Requires-Dist: pywin32 >1.0; sys_platform == 'win32' Requires-Python: >=3 Requires-External: C Requires-External: libpng (>=1.5) Requires-External: make; sys_platform != "win32" Project-URL: Bug Tracker, http://bitbucket.org/tarek/distribute/issues/ Project-URL: Documentation, https://example.com/BeagleVote Provides-Dist: OtherProject Provides-Dist: AnotherProject (3.4) Provides-Dist: virtual_package; python_version >= "3.4" Dynamic: Obsoletes-Dist This description intentionally left blank. ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/malformed.tar.gz0000644000175100017510000000001215231700043020406 0ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/twine-1.5.0.tar.gz0000644000175100017510000005142715231700043020245 0ustar00runnerrunnerTdist/twine-1.5.0.tar}{7p+y, eli|7M0:3ئܿ=FƉ{ic󥣣zޱ77>ΏwUj WE ¾bĎOlקno/=5;8ۻ;{_'@(@L`:v(#C;ݾASExB!VGFD ANj9q&xNom??/DeUt#u=()wƶe߾gA,x66zNFoHq;E?O Eo4b¯oy֋:v|L CN 1v{ {::x>ebL ;0e^;[kƿ o:oi<㿵܅lmm61>G8 AsIBA1ZN ?[q0A{UDc > ˆ,k_}j Ϭgc׉Vxl7tgV盝8ؙ ԦQGVtYL #\"7M GP<}n#.fiƢNC=2O=Ъqq ,$T%zHA,|0>4KXUDbܸa}L1tQaw\-1o 9ob6<;<7 p5F`,9T0o?ͼG$p,%0P4DځN_v]9uo~T37 Cd}@s<{r끈rQ{.f-a**(@؀ ` C̆#i9 GJ/m.P_! |n; ~h5`rOs*g4Lɍ;mtE1,,`"$]l4Q@amGeI*4u[0ÿC1 RDxgP1<'!Lp`\58,HUTA~A?j&cӌ{{P@$О~'kި=='Gi!h"Ldᕋ)SK9q:5ʼIygVm3!1a6{q@RU㼚 '8DMN ' qz# M`EM%A(WehP #=%+4[߃Q{6诠C^dab6Em,(jIثKjR 2izFЛ)qɦgXb Wb'HcOkQ+OV"p!=-C-#9TV31pmY͏Pg׸ BE+Ne JxFG*Ԅ)zߩ__}#i >OC @'9s ,}y)&!.\D _#σDryOmn$F)$7|Rnx=vM㒦ckA: R|Vÿv14OF\g[d$ȷ}˧;4n2V~R(*5I5Azo"I,+5dJ鹔/s)^;[Jm(R&|JAJV`m P5d.H2#KچpX)2^ԑw;2hjMu!݇DE_+wT"B{HvDLD澔3Cb@F+e5,!m-H@C k&a2CT'B*I*],nMnhKzl >-SabpW^V!I, *]lk3vQLHu4|ƞ1+L .I C+O޴,(BR:Fyh)QO A &Gx(TeUm_Ҏi)~~ @nCeV!kP5Zv}H1Sϑx/d"бK_ZS, WV6"_43ߝ=X5x]\$ +w2厖VsY"Ѫ=Ej"Pm2QB唵JJHk@ҶK8>icI*\E+\8?>[u,mPcX_@3Sg)(2/2zTFZvP7/D|2`"(i h_h7dk_ 0)TkSLPI5%J>@Ha0* y7y0(tϦjW%{1Z^MT @E,8ؘ8> jj%&{jv釗sRI׫;J|RՇ2-A,r M2&$ Dk]]2 \ǡv| ȥ=i#F:3Es" *R(@h߆dv DR#5NI2 @Xj, PF> g8PO9UTI:#ğss.WnezhcwY۟$M$^`A"j0,5An* E_T<R6:Ds lTC y7- 8ô";a:m2/%ySlp"!(=\j翲߻[uc|l0G"{e3j(R ]iB G/ևV%Ϙ9ҖŰёƝdSöZ9JIl뢏eȨeYH'nB4ZNQK4Xǒo!#YE)o OD Ҏe=h_=o4w뿱^Sqe/9 UUgwBx?{wiIR 4?j_ hXU _Ӌ}gopӳˋz_ꙦO}jU% a ==mѻ?Q`qLt(zYn·Ը@@{k rNIP߱"3ƂcKWΪ Xqb cJ((|;1 P]g R^-Gi Jw/NO274pRֵe%elվ{.z(dY75Ty.b8\%0Z6*r>dڣGiRRȎ3ʥL;]pXp˪)kQ.0`ve;^G_^r ro'H؝$siD߰zFF0y2(q gP܈;麴 ՖO?[*z}b0ǧB$LgU, Z? YQvqSƖR]Ի52v' =l <hHj?Q'v@ t{1ڒCce_.$챸\ґԯח%a6]—tK|f*F3=u‡v ٱw&ŘY7pIf/_Z[(\$]Xe< Air㟖=ia'~E,3KKI\z[!. ,zӨˌ<rK j\tsyU/AQ `\'0bb0b,c\sbPa*Ɗ%(̔PG# M]1֬-A |NM NzPo5ݽOpÅDŽLtpĝ‶m+Y3ٷE3L(QjBqoYhl -mYl'鵠=C틯+ j˯*+_☯$jɲWQ)9̢@mx-jו,jָBO qQn):)7 B ֹ5ӹ}9T c[KRe(dB)"}<4 'sNibwNkv孎^ g,taYU)ƖvEyב;©z(=)vo$v؄E E,yT" ^ӗG C_>}{a7g4p܆av?09nY4aw/uuAK!^-ED:/~ca_f9 gT/ĪYaH(Lq9L5J@*P!Cݡ\& $ZyKkjg4ƸDž#oi9PS,P9^Ƣȫ#"|U؁~7J~X_"B`=UC%Y idq@hfj4TUˬlI;vdwXa>.^CC̤=U_$1[aPP2Ê6Җ3do mӛ7 4㨗XHq^77<mk9~ytrqlme㿷w7CxkQfM7J\J(͍Ptj̍DuytB'Ǘǧ'xwqTGg秇^:<5Fm:^](OߛDf|>=YDi$ޡs"}cc2IFhh_:kA JIޅNjBF2gY$]PAiw:5?=v">gq@PeIIR&Џ1JdׁN@)e;2ܦ#Ϭj2걥)I%A$*^aԒ^#W3\[^ӹaϴBi{#R w 9`M x F4 ;ALǒ{N0N8"v+8<+R& iB.^{>Qp!) \h^fFսUk>bR 9$Ӝ] p.qc@lD.o164`j$Drci{v$RxŌšZB>QfE#Ժn Ԡ9LlܿHï GKY$̝q<B󓂲72ƨI4bcJb9%tօ@6<TY8FDB*槤*.`88s(7v,*PǝƜ!T2w aQ1Vݬ"|*d$raK[*RS#A"/jϙNh>'eII1RM"YV FLrj绸-SF2r% 5A+|pC,YJ% 핀L`C d!Z12D!AigoJq8vncYJ.%VN1e8:rI FꍢFJ&ӍeU4dH9TphN8ң0{a2GV6&7*65:q ʲʐv]_y3'h j7`陶Ee:bTK"?clĊ ,6b;[o +a<Se ?9ڳ*_IQk]5w$ʬ(b_H${_(O-Yhj2JQ3cFF=D-51gM%^1%jr֐]TgjJHd( &)(R?*A4p@#̃3H:Uu pHK'/J).& 5^Ղf\rQpUp9}/R-jbKD˜񗉃V QLBBҌR)0X.!nBdDK[ɇS3I/մkmM!M4rՃwA*MS!tx:^>zw)n3t~m{ Bkz0z TfݗRZ>ižAhnɂ[7ܞ]I{VmsVFI]g@=/i& 7=@ C2dђ+,[TKG.(AX2̢Kc]@K$;8 j?|}R?8??8<>+qpaM܅kSx$0Y7tәH!#̰I団~|G'5k7Ǘ?Tyu|yrt{ݛsq%#wёhO9Oݱw2 RLCUc@^:@,ᚆpQ4y@֋/GAӆ'd;HIs{0o$*b7ƴ{RRt3Gcvt+)0jw&K wco5#[K95[rtݱ%%U>zXLwmg&bΠyEeZ(:'sMkIz,,P0s{7q{IBT\S1kCEr8$oyƌiCgGmzW*|g0x }L1HF{FGo< Y8cutnKрt# 8P?zv";k62/ 掫v &⠇54!0juZyt(1Hd7x%KDy[؜&;1A:cc!bj@Wʘd/ Zli" I(+zܙ1Ä${%'ck o<1bǀw`!pqPO^c'gQ\0L~;*eMucz¶ť85j?Gd짥~=<;з/, ,ĝz%w]'^ҝL%uET ֟߿Gqۛ; \{{{ͽ=]ucN]DnX'`¶8qeIb]&h@bdg(r<79Qg`QkW[ZbnYH,~-^`I harNGB/UЃzUy枿|3/FaXXIR^q@w|bQh..8x$E_/%wQ]AmE*zb0d8gM v]X d zE}屻ub&9p~PwmF9ވ!f-e*/C')7 \tе<%xnT'C$Oz1N$sg^Җ3vhp)3L"I.ast:Bw1 [ws.2 &)ʱ|: ^̨^jdT_)A^jh$Иwh짐+s>fI 9qh"/NxѡP3=7#`z鉹\6[ֻhQ~SoJA;}/e|-VJI`y[_}WF؜mmbӖC\_EG`ElT?/N_< rQ,"52UC}tx@?8><:ԧ!퉗oѳwUmW-A!Ce}P P#w=SӫEd舿Xc!(Wud7.Q}T) >$6QY, s tƋz{"9(*jJ"]6a$-+ hp%ܿ?^Hm2YMؤuÕɥkb a)1h Y$EHh[=\ S; Y`bA~g1Rr ~ W>w~&:/!tv{zǶ}7F 6\O)(uᅽTݪ^z5i|Cl<ņ>\hYD}=6[N 78tZAޡ ۅכR|$7)duq{t$ Ne@RwQݤRrߩuX(_$O,YZ4Dڼx=pM5Zs |m*1^;I o DڶőaàˆUם-?")2vG*Ýzs9}חy!*p\tj2&YG>8mȷ* ל`q7҇RS.?-=ܗiN`2*wL՘ig);Дw0J7@2PF@MCP džNԹk tR@ҶĻ?^hi-J[C5˪l(" ji߅:K2OP9[X3ޑ?{N(䂎}aN";+Rb)xn=<=ܤyF90/GQּoy{5Yckܿ{8IRxF(l~6_o%{ܤ?;ݽߣ%o'uٿT ݏz}z}oZd}Ѿ'=>҃'Z?BE@+>O8so|~ ^Uoˤh{ZbY"+wdykwX!KwXzò>ڿXܟ%>c?"aݵ8 ϰ|?K`>__E|Ѿ|>?e%~}ugA7i9 //[_OÏn=!剟; 5{ss^xR!/h_4,eM `Q]Y ֟8tȞ-L;lDF_Y@GbfdiqȹA:!&aU20r-Hw8lc++v|$Xh_lҏop??:ۡ_;8&9 DTKQ ]kW T:taLeD|NjW%ω]i"YԆߑ_^u,JEg>2@12 "d(LiK3tH M!rjq6 1#Bm:C\#q$RFR-j+ILi%)J:()!^R6ŦGnohϖLJVJ<fMU5>AWI`-jB?QKm0ne^~rH8f`R3WFTey NV@֯f1T/uro R*?Fì$D,J])bB2>cq'fȉ{w[a~Yn޷½[ؾ_A_ c2._)$Hl@ܰ2v&ݾQKG_ p6X/RZ /4EM'^UY^|ZjzdJW4'J"t#t~0;2 L"A7j~cERV*: .G^\MeJ>V~/w]PP6w(w[`zɤ-UpZd(c0S,n 31̢"SRLMmۘ-|Ue .WX&Cv2P]St&et6O_ (#f{f2G@2@g&OSQm''TT«21ŒL5}6*4IA+^eLZ(׊ڕ.&j22$8 N4Pl*8 E*6V4mmǥx!˪_<ً^1IF 1?;Yo' '9Hv&tKTObd ѫwo.fЍ|O8GAkL٘ēiSzw { ?$vϯDb5QPI*9)U13`(3ͭ~}:hW)J)Cg;C 7D Y*ZKSg:agW*U'p* ;cZ]e#%P.e(\U;)I*|ښֿYv5%dL7 Si~{%x:vuD 8_h~!>~lKLfKe jj ѕSv _yj+\8tJG^=fj4˟]O{c4O lms>Rᄕ$0B"|5ي `vG oE;`p(we*uZhuQxP%Ijx~3 U6sK~?}4w?Gim߁?kmPh0f^`qYaOuA$'>??Txfem{ߋa| ĸ>]lZe!$XbGXYKi{z#qcA?[{- "yYnt=3Ylk?ή05ÍƞN 9[%gKTܨ?4Zf t֠,GmbcqLTa<Уmx9XkNorzu2_oC L?@t=&GYhy PF Va0-WRؕyV¤*NeUY"l~.L: 6gJ}RU䓪ʖߟĤ_. 0 %$e!̦e@R KWPtEݩ{M1%Qvkʣ0psKM0@<7i oV~rH&.]cҡ9_ʿQ#JOjP p Oz z$F0hCϦ=fd5=dZ! 4Zzx.ޝ]\$},8?z{\\#S6L'^xE-ûɐ_yOAO"btׄ Խe$J z{ kCz#ʴ_mӨ\OuWspLOx]u-":Ypoc5Qtr$nQSw 9~j~t&C!]鰭NmR1xx`h&(jyb;9_Q@_Ëf)EJ`D+uRqWICP}y;4??׌.|z׮o3:"oZ“^2(`gVsu8tcØˌJ7btk,OƢ z~r v`}fm8VJxzaH!/WJ{3CnȳT|(4*xp%P;7$r2y_/QS0R6= }R)ld_zfjZɮn/(|0]U|x,)RU󋇆2DLH}$ݡ jUFzL]+|*uGr>T_*jHV4՛47F:'B,+ !A׮xˇs\õi}h6(bH^L[:$Q SB??Do7*4 p2h[p%jjڑor(\FM \1l-sԘpf8[b6O[5<@VI{14ա)seG2U 3jR2,uX XQ9]x{+| 0jŸ{oJ՛Q'rC>-ZUx:ƪlfkA ƪcXQYv>C MOtX!ɴIEtFq}Q 8@m]~rsg2Hi@33ggڗ)Ti3ShL\`CW2X*ſ 9tA~){r5¢ijSJ˟B%!(S;GwvN TS?TQQQѸڠmhLgw)b*h?3kώVc;a꾨ߵoH@K.H :.ydwnPH-V܃tA!~* j8WIXT\5~lPS5đPOơx>kuRDPX<ۖ5HJF>&FΥCӆ\b(l ˪2zL*!lRQʠ3y%QC M} Z1հjZOk}uFb%>#1bNS6Fl02eTM}+k yF9T=ufKj_!~%ZIٳ 'n6olqwVG ]c*mH^+ѥCU /Mi@`VQf9& 4jG16CԺw@W ɱf\ n3z$XZfpQ@ZZ.cN\j8rƦx/>Nu\EDK%mMS])}Q\KPXrY}qS:L ץi|ʍWJi+ {]~TFb^RI^1}3ljz%5ɼ/n6imuSKD\Ï}ߒMJNaY,Kp_:Hq*hE<(Ϧ38-PZ&˔_R}6P!GބO 97mϟhzbbBTjjb@K?ĥzcXN.K&1HK1UeKz+ɏ8zqH=Pp1#K s+Z*EE[E'`_EzL,i⒟I)˱J6&ͩb(u } xܡS4=(Pz:i]GNSݖtnR2<@AO%-USfE]!pXv?wޥ+uHOFIݭM%7]痌.kŝ|br;M;;U,x6XbBfGoR,?/<Λ}e[b.`*73Py Ρ8q FG5Ht.NFX4{{N&b,HyL,!#ARj2[f1DъiVq[g[elJ0HMd#Jd86.r TE농1(`Hʼn7ZcOT:N&u['fejw$]l-;4=~N~ C72Tm;8;v" @RKʥ.*D1f¹ Kf]C P MP&BTX")/K:;Pb*IpxVK ׏L*%`r:8HWF]ҫOK-#^^E eo3 7:~s˯K~9:~dD!yjD8][&ݸ%lGoS05N nindnZ'IDo?{SK2g.Qq|`o WĂz?'UN@׷͇I.d@GGvIa7ŵr+0aoK,mn4=BB1#6ȃ~Ξ솉B}aoJĶ3|M(O%?0~i8?⡯HtSB439:B@|@bH}B%Dx`bgKc :e? dHZQˡjoA5I&n`CHw_ӞpKjVoL۔ ML|.Q Ѓtլw!{'zGx$U ӨǼ^*$AeA `'썼kI`M_'`fQ>P.e8ܿОAuH0x_D+=MH߇[+o9E (Y~{typxpyPǷ{*0ҕ[o `U&.٫{U!&a\]9%B?eR)VX5™#s[5CJ 0C$L^5Qᓺf_rqaHJJXvE1͵MaVB1fnF22ˆL\2:=oa[kkp/LRH˩Z%t? TT_ _ ' \ 8A+64\e: *0J@[;uW|2 *z8kMn77_ﻘ:{sƿ)`lnfk`U|_e7v3k>C/w=qѕghe}Xxʕ%%ìNF7vk(] aP ߊdIb]p> =`1GKK,:+-=FD[KF,Xn2/*~$y}|y N7r8P2L $s /Gsq1 f@c #/~]/]Rt %VB,tmLpDQAPNuم }u*$5܌0xa"=Q@QINGtiji C8;FxQ4sfsFSEcoRwaMctׅ>&] ܾ-v[E0M,Fthy* x̍ h` itiQGhKF:,K4Yeٸ=S0t:QhM"GCAg~11"VN9ϰY/0 <&&2  9 "ھb[!i)SA񴕑,˝" tBM!3<;c4PO I+)_09+6m9;d, Hl{Y薍%P_< rQ:yDjdȇ Er G'N./L8:?9x{tuSqvpqӷoUiH?пm_NK1##C rH+Uf}T#+H)R0FQ 6&\I777‰#uA/03NG&/VJٚG&.<RD2N<)M& Ժz2(DH c+#qFY44w@,TB"heh W>o39> Ó ؘoTq:DF@|OA /V͆׳IKf;rr=D+剢'7{۔o:~o*]"S|9+ۅ`vMU!5>t b] :eA1^8CpAHgNÆu/htYP_} :,/'n,-j>uR 5Zs |m*c:J%7 "mȰ2B j)YwO/HRi tl*Ýzs9}п慨qөȇR,Lɷ;6]58 s>y]jeXH| wq0%V^ |H ꚦ8J0u `(0<6t8Uo2`ɤ-'O:p EF- !T:%@d)f…-TTTN@xNHA#8@U5˝Bi4|2{N//*+/]^nFd=ܤy 'Xͤ {ow]c5[n޻ؾgtgPl޸?mJ?;[|jb61Eɦgoq/;le:|cɤۃWG[Go0ؽ{mK^Ŧ8R~]%&P:dz;s vD_Mz(rӆ:c>X䉂J|kXcqւ8kV8h%/{y+ן?>OM_Ux6֟gY֟gY֟gY֟gY֟gY֟gY֟? Ut././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/twine-1.6.5.tar.gz0000644000175100017510000006413415231700043020252 0ustar00runnerrunnerqVdist/twine-1.6.5.tar{{Ʊ8O -e-7-:%=s::$H$j`P|w.ŅŲӜM-Lrne;_}&|vv.lo_|jnmowfkkgw+ĉЉAA@?'1듳25%jv`w6[{{0ۻ[{_q |/ND837b\bI;I(T@adzyQXOH+xa`[Oٻ؍ԡ~zcgg! >y{=q%GVgؾۖy2lH?$IfqgccDnԭvxO?m/ϭ3d%pqN/s P<G@N2)^}7كpzDqЏiE<2 1 7]_T]Q,%@f7,Fx~, ,y`1~/K_㋺u0t)uw s /=t><#Dk1p!Nk>߅&`wz,Y<|waq6wwva6,rx \렘$&N0vplT՗X;ۻoo%>0w,k_}gעJnG"7[;V}޳,!H>;;=|:Ϲ'q3 C 0pBo P 90n~7\禎LbV ' TbTYMExGn'.(?;0,r㘔Ls=qx3pI3`QPCY=00Z]@97a! =ҁmkh6{!B{I0f'!98>! .3x>̏ШrbP;ypd^ f=S 0+[E%N6lI[!xo,, g$^G4_VFf>z@ EE_Gkz0>|qjs6q( 'R7p^MPfK$>(Jz_AA4B6x>A=Ɠzq,h ߇:ȻA MLyq ɶiwC=JC<3,%{hp[78r T(p'5bxSNj_`)# ]-8_zkJ3wZb bE^q-iáٌ?z{ `(a;cca‹$dC 4X]Qw,y|qԨZYNލdgdVc^|x@^ggf RAMv`wE,1mɃ;H҇ p=7Ns-"nk~W. @jEI"Ϗx\s\f/0s``8b ' IR ^o?|_&!1OFo fT1彦?|dr#~E-F$@xKϹ7&Ƚ-juvmˌ IN}70p0"d,yƅz=:m8O7z&.K9C_Õϑ4 vClT'™' ܈Ȳ=r^y3t|6r~WŭYHs#T ܬh*ȐNjX} ?G#0mcQfȜ4FO7j P(RD6p,dƮ~q[г LilԓN Da4hg-&T:*@L?y{m1$a?q7UzݺCA):?T秶'RͲ \7%o }ӂQ\Cɕ@ľ*6,T$$5S+ eyw-a*=T_%5G +o[>p5C=h_Q4}%9ķ P9hh 7Dw}x)?)mK b#avn$tKjPӾ@USNN3wg6tSh]!Ӈ7G3!"эn}lFlRSh k;ڗI*Idu_ 0ÿ +u(bj' G/`Z_z8 c)|s$)@̜[~'&@6 粃bՁeP>ZQw4V )QMA|AV-Q5h!DrX?Aer?)VrY2E^B6? ?*5,fCcl"BI9 NUj4L|=T{uRHc&4#LIg%'ZWaCZ}m.LA 7 d،HnmX (JI8 h=ӑ)D˴s"o&IxeKxsd`BuDzwHb>Ee4AkϫwE-=@KUfD $7ZFWHji~lfox|h.{bڲpMDDUXh2)>𬋲7$UBdX/޾8x䚔KlЗhioțD׈-\kdwn ڰp&ۤۂH~q:HGxN:\o-!zd0 Cd^;e *vU{Q/kc̅L{N翦<,IB +Ͻ|SyQw$A*YxKJ$HCLaa'R F}>xޥE{|tG٬)l5U-IclRO7xNԦr%5J@ksHҚ|ŒTP4МV&¾q.ܿ?X,7]cXp@V4g#^kU^dkRX hummhV[mf4WMriՖ02' ;S7PMB(y7pSju; H$(d0o:5tb]nLXe]NBeFmMc[ :yIwJ.M'eB mds)q4Q'QR{:#mIh8 V( & i&HB8jKB,e82c#I&6H<@"G =uhl_<3ͽ ?7I#hOEAmq3/Z8L{w\@L-S5i^:e!"+-YiVv)>pT%DT fgUi")0̙JrS~PcdFV=?}s t\oH`h'!fٷ^ Rn8s|ALB!D%k<=2 6]E )U}JDۇ7z BɻY0gWjȊ`DC~䠵ɨMlg_VWb̨FJ6߬&~\|m؂g:ϵj,rIWb"WHо* 15dGV"zиjؖyW-WzeDz^adܱ, s3tgɤ#;#ɮ'hp-~'',닮ƱNZ=Yzw/^W,x;‡S积7/VT@0% CU5xytχurzqS$L\yxy*lwب+\gy0s} &hYؗLѧ\=ٲODbK4U'z'w0 Sy3xyO*JqY[MJ  ,]8*V/>v`{6t+h]*ZqCyM7`fQİ e'ǹRʈV>M7);Lde|ա{.Rug~nhx "Dw"yUpF%wQ>lӍC?zE% +ehڱoFF  Y<=QWrP+_/a돾d0nx;MC͗CY}YXK뢄%C%-Ɂ[v0DLT<{ zZ-e?]E4Evb#B֟0‘i]Y >s#44+lXkՒDlEKbKȕI=yE-E:*Z-9T9}^|V !e0犁>X>V tP$ _1 .!Ufz&{ q7)pG: WK v[0K?r q27K/seO&z?2pVw˝xxģAl0dF`"yĸMucHVa5uC/ʹW۲Ǔ FRF,EUi~( P> U IRQFˊqHݤ|JqY1ȝǁpkͧ&W-a7ZAZrT;]e+VxUc:V t`OV.vu|jݪ݊}\Az_"džN1 neh;߷I# }9o{wo`[o5ͽOl'ÄׄNtNm+]3hٷE2L(eQŠo!Mxh46׆ζ,_fuӂlZRPZ2[?h0nX~aZ.l䵾 [b≼ʋ€| EY[]a }dWbÎV,ʫGV)ID[EpJKjKRfnY(#!wð3[yUڵԪ]ѵn6|mlm-nJ#ws ԝAfocؼ !GPO[YC3Yi>7 bAϵ҈nU- # hnymFL9yU>CbzŲWjFSьF}kez6k h lVlSRX[ 6*D @.u4n:1-M`)c*h`˗B% l}~bKIdͦtո"~$Kepx*VEY7[ ™Z =)7ovl}xUȋx/ERX͋5xjX 9$6df\QqBi-$ ogys \$J@yXbG.cL3;f/ėHbui,OWUP$xW[@D'!{u(PLJ yoago~<^^Cɥ ujק/_ݎitmOJGGqv+ S|Cx%dn2z~۰A*i+B KZxLk!<̼RPfUr+HS:J5IB*C3Df@O:0ɛJ4(X.Hq\ Co^~_+⿶ۻu/+?3g7kֲbOƒkۛ ߸®.!o@]__u@|$ްóxqr\:9A^_}XVj["PAS;^^C7)v|iI J6C$:%ލbg2HFh=/:XAЀHi:D!Y+/.NYqr]PAykw 2!5Z~ 0n!6 "TQ҈8Q7dt΃ 6R:#,lKYWU5ҌTdA,j^am ADLa"{C8j. 3PDup;԰Ƶ$M<&#xxx(lR4:X5a>`2M)W(0~*us*~zDr 9虈i&!KOQifǃ#M o 7`Ddli.Px (Y\Qr4$b`FۆZҹ0ՊС1JbJ`8b1-;FEJ'Ns 5rCCÕXrhi 5FfIzպ_$=hᨡ487 ~a.<녨z32d 23@T*:Sx Ax|v)Խ'%CTD#g`cX\X.$ 9+aܐT10!יphZ-CN7u'&Ŕ{%n c CPf!oFID'0-~@i;LC)Gy;Y?%drVFg Lo*IVRMDc7A&9Q&$pɢ9\ K f<8ƬIS/^1$1RjmI~<"MhOTcz"SC"$*z]tlqPl?\8ULxB`hZ7Q/p$ÐĔt< ziKUJj6h@dQ9\pP)05o˲jL6jDfNѲa4?DmXZuZT 4r*8kQ@͂W,>&%3f#$ Qwɛh{Oˌdÿ)\s/YB.S0U8:BFA 5)ɍLƳ5ȍU$t}JKIBjCO I(]+)+{ɇ3j\5mnX1B]xɇ3#shjhı-Lhp _L\%՘ZY?f0K =Rƾꏔ{@ -Y~3 :>G R"|āT&@v? 7U>Ơ4]/ sA*MS#!rǘǏd}~;SA ; ]ZLq֡2OXےcC@zO \!4Je}I ֆHs{Pw8$Gs# "x߄Bz%YGeXV%L;{6&& Gq4/X1$E5iHSHEtzrS k%j,F< rp.+s'.㋣sqrf?_6d.\1T#&14̆ 4GBQM..6ǘ÷ k7G?:8><3l ݛ3qwF>ѐ`Ϡ;OsdCј9Ri )orEݴ; HzF[禗#;JzN& y2u@*'5w`c(Sb{%ŒNΡaz.[/j: EoWΦǿ(/AH=3?ub7/80J,,$)aRꢌM,.iDy?Ys$ށ(vKǎ$إVj®' n =PKP4T\t+@5ҽL&p 0*뉞%郮!@|A=v R,'m=/Q [vieNOJ«[%jAO>#֩ltD!-%B(f Y*E:%;Ս|!͵^c9M"Am3Ԍf ܲΙr+ʹ&_fcJ.ujddiCa9JExYrF`IWE0icJU3ʶO7.,u{u9Rxzge6p <&\4 ׆N>~Ds2Dn۶i1"}o|],e ʄskN2o1I"K'g'G'g?㋣ z4{jgo/-qCs&Nߟĺ-^ke8AXGјSu rv#,ԇ۞>M-q3%S=q_n$C]%# GI|0"Y鍺M\7^oäl.EN ޜ%-]vcusZa7:Ew|j.ȫ]&HA.RBᝁ0[P &; t$ѝaP5WJa!h&-WGo kiU6@^K}]\y -zGg/Vw `n7t` @B(x@}OAh 6Snv􃗼9{ҮaSSoC\-ϴJG}69ӌ҅L~%S+DR ?lVQH ԅPsMiC>g &@35;sqLLEXKAV# V~nIӽf[3ؑ7H5r0[kBMF|SԖ;@m["8Z(~U\JcbI@}롱O<#w| 湨#5="|(p"ؗ*G*w*&t:I<ÓXِԥHHOS\hT[03bif\RGzgL%) B59w#zC47 L &+C+Е~dVxT7cO=d*Uczj*:W\X/Tgn!)7@О}hyOQ)ANͽn@@) =ւ7ҖOiG;`tG  ҈n DL",Yxa8 XGۄr¬~%ӛ1n)w2CD9]royV@I/^on, uQ8 (Yi${Q־oy{5Yckܿ{عg#b'/4v3,g8G%翛{;_;{;[mhCKf9'R~wun,+sͥ2ֲs64Yf{\*?[j9ϵ,K_s7&ϥ>yΡOmM_ϗzd>GG87y'}΅><@ts<;XVz~cl ?|2/QY>|e9QMn9/|1EX|H^1/zsc?W_e>H빴恇D}Ѳ5 ʾ7ҿ@ Ceq_Xam^y,lm/T$&7I*3X<m{L50M{>)4BͬF%jD[ZP\d@ dK≾'.oF)S|K~ yյw], }#X1*:)fҐ&O>5 g:w *}ul;Ƴ cH=1bAɇsIJԯE+3jTJWS)]dn%{F-w &>tڗ♨bΖ(Pu ޠY:OTB9bxv\P_*(5wuo^&0Y,ܠVIq+uMõ,ϳUsWӐppJHm 7wN%Uc^cmNΝ˒έ8uV;mܽ$9ܳ{ {uv}+ܯRWOm=uCπ\XNjŖGqEIB_SHx1n ]]cpT**"ۅ;hd*b%&_ ;33-nv4D~?hXuH'ArR\ͯZ|?6io7=(߿x,*f d}f]oY&0RT%af92GtXN2tt,YGwAo.P|H?{{:27δ?t 0pΘќ *"Ƌ(Vd+uʳRRBi L6pUR`sن@c&.M$ C7A^MbV*ς9#7^RO)FNrepA` ^8"\oa.nϒucAǯ.ɪN)}=v(U QM6:?0Qe6:n%xc) )jҤq@>O+6UKjj]8:WyFMT pTijU3czʃN"#L 9UdzqpZ( # ',.tj8BTIddMd]d:]}&?!>ɮ釀q2tHR&4w WJ|j=3b_{Eʒf͚b>DO\A͝ݽSaniv.&B7({wtƆ lSa5SځZqjҰo*xH3K ~v~]5' }j8`kXΞƏ ՜*p#'zvatGYW y&?Teƥnwj\><;}sp>ePø6ookZ{;ko-=WYyXɺ7u~OIu/|¶l}xK,%؛٢ n įb d8%$;BgL3K:,SKKGQBǕNmPKê]T6y d;Wlgi(ʎRh\znS;L}9{#/Cw.tE&q֪}r.&^֋^%.aR=dI њwgasO}mG*Pv?! D#`@?djq{ gjAX1.Wq7ѕZ2 =By#?B/b+ïLl-nz1hhf&c)TRdtc/X}p2C]>\ԥ:s>!ghoP+8J"]!\Gų ?~!Ruq}7(`;.ha,L,l"<)L"E(z̮gNUZfƗ&^?;YH(v_:xkFKUb5+T˕Oф>&ӬCiԼ3+[>x?KU ^,ӆo N¨ WCION#`Cي;ITi\6];*X}R*,DO)!>~'-<&NooDu١+…6X*X]zztZATU.2K'jqt꾓}F HHGZu{,nj>d<2+w A@_5٭ 9嚚R/I-R(`*izZx  s5elhxkc Ư{@K9iKmu%7w6wZeo{{}oVo4dޮw6)hsSq09~Ҽ%$ᑘdtsG~oM9sa863 ɬ @6VXyC6#?-=- ]aʃb#6*UGV*~ Õkڠ uCv H;>}c<2)DWf z@X7=Vç5,8p0bZ w1ճ(+>eQT'N2kqBg[_fym`S° R+"̛WE|OQA*UuX: D~{#ot)1G_(:ףW;;~쿭.0n1s^\AVea9Ȁ:Tp>\z/Akto##j #g4f 2a@ ntrtG!a#'h>"ЈLAa(rȝEp>g3޸Z4J;&3g 7d<;{cxxW:Ēxp+Q\+ < J I0CY 3e@a[{6u[Ai <41 ]Vd!mEX(@J6b* kL) !ZWN`)Me5 [tV$lD9ZNMm}yhVQvdɕfSk8;+7*n)uTbQWDd Lad*!|xˉKktqc0;==;-pvY#Hˎv3p3dotihň CL-$X*kwkEWh`wݭݵZG;%|n>=Ϛ?:ϳ6̼ Q1112 9AR^U0 ^#]͗%k8m/ާthL=iV'đ/Ӵ.EݒwfueKhZM#f)V7]ZLhGȯiSBYKΈIV=6juÚbRw7,;asPEL;Wx@}X R1ǘ2J Z:\6s14Jjs~t؍aӡF|&߽trMOojW~m!JDR<hbUA"mZ_Enw3^&<.P_mJƉPV7 BӹO3Y"l#L8s?QE65{&3VpM6)*Oիz\֜3:BlxCbdawt>Kkr{(ܧw/Yi>4 -7+in&e`wjW" DIWlҸ+'/y}#o0.M2U~;bcY$^Lȳ*DRSKFZ҉@ 2q~5k,%P(RBIj7ʯ@]rvoo=~xh9@V-t[{kVY颲hۿ,}rT1`Q(߼@Gg[1&_ y*N]'X)ŭ*dlQ.eJ㛎hBj(6l6H0п^eԹXt:oP6 ,`.L +yn\HzàB\qLpDY]8 bKO@b]+MhQ+y\}"B((W+jkY={O9OV~9SIքԫ Uč5L̇1ZZrYAZ Ϊ6㥱MyUrKv|[Kk|0ںl->˛75UnhPHXm{-WOI8uAs"IN]ޥcםFs ~\$#݉sH]vaOTT?1@C540"p!ޛ(7\܄-XcӼ|{͸ҊP-a݈{CnAᑃ6SJ*SGJ'aS-`2%#LMAZX?ș8dB}1(Xzp>Xa܍Y7k}\ ɑb;! z`FԁM -E[aLQDg) n@lEEσ"~v h2%(.^|$/|Aj? iϭ͝[[3Qs;)W*Cve68QH*9辱Qҭ^ӓ UH8#Ş*nym;n& KOI Oߝ$zנE' l =x%a/ $/c,/ƿ̇<h#!SԲ(f5cgC"V1pudηi7§ڢUS&}\Ƭ@5ePKj&٘xI%o3h7S&h2C`)@]].OPZ9WvP0qJ<0gl/ٓƏaW4[XL?EM gyF56ׇL,S]@%Sè. UE ~G|]IM$=Q%u<->:ɦ)FD.Ũ aCo3 031o\򠳓cU.}Rh8[UIY1o[2İD X3?\CԳ),xP%.%LL_buMˣs*,|FyXjmMzF>2亘+&i9[%v$TULFRw .2S#t352U@8jz"B5~l䢶 ᳢L 3 [2m z-qC$R&U{ V\W8pHƞ[5ck V<ٞK5Zql *#) ;Vj+ 'TP!I4}\ 73Lfs4OS{<7TG>n*;NUl H[w]խr˫эj$to};:aeyAMO<#+U!,ßޟ<^tO.\\>T2<[_ʡA_͂Sz#gb X/gsci壂ҫ'9;]f2!_Cpo3 " Kw¤I7u Q ͫRxW< džBYn9zobeFWTLԨ! A %CluB/OA`45*ρ+ldI`,=v%u_fg +uUo+*E( oXk*-oUH7\lXF\Dw4l*9Il{Y5s2:ot}c y9qޝ}sJ̯[!ؒu$[*{KlgT:p5t{Dq⻔0cg&'z)RVp`H'<ɧCff.y3RS@2C.;j4$5\CRG"m2Ҭ x MK!-6H"(}P~VpBSZ2\?6qtu,7J[գ=~e)Ko8fMfLvBGj].Prg䀓%d( N% Uw_ȍ}}t""}"[bkVǾI Gq#*d}V'oxTpkR_}ьw' -PEFՆD=W&S!{^l:ZoXuˌ*@T%DŽFSK~_ENk[{k.F:/ތG'M{녅 ޚ72/Yڼvٷa<>xl~}x{pqqvmw7)n{ym}z^*<]r8\fh3~@H7ךt^l/x_?ޛnSC ;<0u5sF F(E>Ue]ܕ7Qw2i.`KdQ}-O/2`S6aS_M%"bZ:umAae0*A6V!Kl#U 2wAzX5Dw,y3Oe(B6k9*ZI-Bm>7[ hˬj$kJ26-z@/h3FácLV^<8ˬ#`/A7jj0ӵPoƸ,V-C2-/,1 ¾(v6?B/ e$ՄŲ0~Uæ1мfp\J عYRVPXݪyu.F5Aǒyg}l0w:H9Sf4>8qQa<sV_zi[-jgow}ϿOAZjxUgTy6SCbH n\{@W`[r#,*d .6+U K\I񘴻J-h:D8k z:k*xT2%MqB[ۛ_{Ż"n0X|&?>kFKֿ@ם<|er[/0AeKZ|iqZ} W% ]wU/- ^UtqnDf])粣׿?^NC7^-e+уe"9"z!t'GLK2:"/I-ț\Zé؊NhEMd}Q8mpZFѤ(1zTBKz,tV9X/5v G_.8{,9Ea==|l](^.vbEj@X .&b#H&nI#Bs.#ĥ4ӯc ToL9LƨCP `ib *D:.f@LԒ2FsH.`T=Dq=`I8*"óҟ3jۻ0)h8wͶg"J~#72WuȇfxSvG,7{Cl#f!fnPޛJQ>F#whK9DMoγyވn1@LPa`t()!snK7`fx9bڹM6,&%Z+bbĤ+;63i]rMm[U2SNxSf# 2Q2ܾb^)j)cs)2{)*^LԊYOQzfUM%<{ħ{vR2L Q)È4$rеg^4H4#B"4y XW| } C1\>&]K2 Eԡ^o}r-mˑ H./IxRJɬc#N]7P+4Ervpdۙp ⼸[Ƞ/ *$} *%{mSf;L<)ϟ̛ /b3[xreq'Y_0׎a9^Ii:XmK8O"#ElZ_ܘkN2o1I"K'=N?8zyx|qtA[h95ú[h4_۶/IfNj?2& 䁽Sv_n;5Ǯ[pv,l̐Ay`;7S7F¡-Ӯ0i3.>/4;#wcuMm`%)wt5aZU{%.RBᝁg<; *ػ|tg;[:zsXXK^{?y |עwtBkun7=G53ۿxi{ #o;X4[7;K^=[i0)=Ô;W3 Rfw0 Co[#GN07B(KX G$eUC1lLB9Z@]o 5$8,"SAbp%hC1L'n)1H"QPŔJs;MX_e+q^-3Z#w0[kBMF,vF;@m["8Z(ƼP^:xw\n}*uqACcxF!ߑ` 5PXKCA~yVt;6'tx&J%u)+e*WQ)H\CF#WΈ}OHl7% BdwE$,T*47 L &+YaH+52C[!P"$<'ʞY2 *1I}Ύ̙C#&QvHqEt24|Ә/.N(S-+{J2" ,|*tĻO[/t~h :( (DL0LYuJ%fvM\SE3ՏQ51n)w;4QI˽u'闿Z%;/ߟ{7^0doxaxEi#vfDI^[޽w{غoy}c5vYh:]xМΰXUOG[||MK%m{xTYզc,.RX ~+??ywm뿵ίz-z{p|C;^`4Fn@pLuQtiMw.ٰ,YXd=%'*"}i&s2ιLža' u|pm\H)Ǜ ̄tbqy5Mkߖ|=[wpnqV wI8/7_ +8XJ隇&)ۼokk-????????q0././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/twine-4.0.2-py3-none-any.whl0000644000175100017510000010705215231700043022061 0ustar00runnerrunnerPK U䋒?twine/__init__.pySMo0 W-bݰCX MCG,y7~b6C}D>>R󕩦 w4y6ª#V[h;0[Q UV2${:^ Tnm8.(3e\+P,@Dz19;S,./>BfCBsy-Tuu? jf!~uh%.>QE`Fa<-+%*DKa&G3j`;MD"(-bu`!/捻6BZZsQLI Dab޴b+Ml|Cc,tFNҨ!l ɒ×2YN(du񴂟|-a7mJs% De𥲭~)[1o ["K 3]TBu١ThKZk(YJ/|@^54J)|S4+LS>W!T[9go"X]8P֯yA./g5:- /:<\ON':q-JQC#X8nMӊGOG xg F%?PK U\twine/__main__.pySn@}WL͋*hB4ZYnw8(; dgΜ9sf}F\ Ql@mJ WRm5WO.Z V2ˬ#-OPL)j+b i3p)<<6?Vf[Bi($r DPq۴$!Q<riCFZeFaUU!RâAj2&'ߋKi"1 [ĂU 5\#tb+-l4Kʍ|Y#:i4!bqȇh a/a|w7-wp5]O^`<{|6O"SgXx$ 0Oh.,Gq@^s6iH^J,_sl0TQ?mmx!󜸺/r v\6<[8X pImƉ<׏d]vm X5q3.>|qG׃0vV1 (ƧXMDrNLiu5 )2E,KJP7mᾚ4:l Ț6Og~ m !bcR2 }ЦJ'2EJ>Pm VWXDpPԾq=e2u`qma7PShR_=)vo#oN'\th2]tۛhK-fIAWDZ8>۠۾PK UZ(Nc9 twine/auth.pyVM0WbkhCʖe B^GNDHrRS;,Ɋnes,f޼ =tKTm%kDDƎȮamwQɡ5n˦)- =|W \iUhK"X8%T@8ZY$9@0N(n9ْVҲo^ߖcRqwOP/WJ ZHs_X (*Noϵ@wnU]V7إs _X[]aXHz?CTN%F1P3@mjϘ Ie^^V'/mYe:]DmDA7N$񎳎p9/y{\՞$e״iA g cXTqDzOl.` 5b{'C'1_w*H#^fi!};6^k_رwaʾE$k _ܽx9YО!Pzh5_7OEMfAd"nX,Ycy^28=UwߏP; pN({v*Ի*\l\jN ؛@PޯhaK-Sڱb(:/*.FB46W4GOÙs7MȽ6PVRvqz=-&) 2_Ka-:(ixjyN#PiYvn$:#V;T>-.x1]Ƨݒ}r:Y9.73m&-МNSZEY3-Zb}4c]-BBQXE98pqfZIsDo? Oe`/u:֬z@i ҥ+Jol\u~.zj TDZb]G.Gѣ')(^X[i% %:CPCX74X!C 3ү=(Wv=2G'9B6/`#&p+X0)lȖX-.z]|/V!GaB愁DU?:fˢk6H<0.+A^b#N}_:Z{ґǝ3]O =\ZTy΁8:2\CttOTGa2 X@}IZk_^ƞF ޼`P[1uИJST J%%"vURc>fDBSET;tm26+&p`Y"-Gr-!nZ+ؖ> sƒ+D'1@ j܋j086gY)I]geH2|&}^fz9y Z%7pVJpN,NFkw>F/k|~*HL_@8U,Fh-eAޏ{ؿyxj9$A3Z:kT|I}=H 9i-W ]Y7^Ma_4wY֏$~w E i[(k]> غL7oߒ+6:hYp1WmZVLv]9wݟK)=?1;h<^Uzpi|K; h~&ؑ6*}gH.QWbڻؤeo=[Ƃ^K%IZ>Qpʩ)ug{5>t;K!ꑻbVx)Om?7/A9s43WW *~?< Ǚƽَ$3Tz|+/z. D,lLIK!mpozill6+)70:O/mѹtT(L"b.d,J][Q>93ka%yJW&4$+ZpJiDѴFnfi8 dz售&t~5FWcܽ33_INp# #H5)l*^sS JJIJ04K\SXRyQѓNg0@P>A=ҡjss/ҔgHA 䒁⨿'봷)Σ<в @ vh0y&Z_(gl{:9࢒N qaJ Si8O`)Ay`oƧ o5)R7bezf6M\H:hzcr5481HlRDE]SLTl UWhs|~g¢wpmЮtv&pB9+C80~F4#fnz\2ɦ*9^><=$&{k 3"NfӅX]OMno{eW"WTecOPYiv4wޙ<+m+oBx`L^Ȟ^&2u^KbKiD[Oy^5-sN1y0T~.mg݈S~F4.n׮v mjҤ17StLgga@Gr"j@ ԬtblX7`{ËWؖ)iښw[T8PK Uo9 +twine/package.pyks۸~JύD'K;Ub9\b{"%靫r pVL{w J bo.tDt <%SP<yC,"eF) G ;\$L)ow%=IDAʜ aB'$44 b#H|@F!h )l8B I(dTRl}+j6m<'1!]1ezHr*v4c%yeY826 gd:ȳl:s~j>b:^_%_F~^] 96C!@$G6c!`%AyB!Kfd-Y;$eٖȋK̷i1`?dCM̗ W'~e2%>ER![4SN?K2$zm3 d[VЈ̤w@J2nniƓ e(݆kPsw1̓o7sG-;S(=t PO{Lׁb5@hgqޚϚɿҰ*)r|YSjRRad& ˏ8'yjѸd@-SmXzhr`5+^ɱ~$`HA0z[ +&uFŀg{.pݕfK^d4#) *4jHD2N$+ Z%"8Ф20Ѱ 04!=lQxtA'@(3p bG:;T%yW0RmD0DXrâti' J?o!3VY?>o߻x;}|/6-W>K_4Sd ~8X}zJ7N/'Y&n9R ӘGvwďI:#?!t笛e]01MKLlKof#2]3@ D@  'ǘ q k5gPXX`mS8XPGʦČBEvoÁG3SkB`*Jp,ރVf_M/'aIPpN~Zو ~fq}:ƒ#+[Iǣ]S-ɰE&>Y+cQ=k4Z߭+S۶ d|1y7LzU5k[yC7;i^Cv3U9֮ )~SYX4| Z˖.GLjC$R(~~.>`I&B,]h*?#^d6#ptF!̫,礍_A"|qP0ߚ`h[2Rc;7V쐈. E~=l|,s$]@P*;4ƃ)4lFPIS.j.yͲ5$e\pDDXsU1{QWTN~8=Pgsr*mr$\GO@r|#ó9*5R cpQ.\(X* $f&uhq$Y#Gae  :r]hS/ X5%0( - 0`UX둃.xcoh3.ówlYH40ބ5RYj `,hY%{~sV5iϴRq [ Ri7㓟=xvžyos ̼725\5$Jp-`aƚp!pGpp-eZZġ*f<e=|#w=<z0t}˅8uΰ]]NofJN^_<3َdު̏eBŸOf[]#l" , ;q1u{I"(Y Ʒpb vI~ڒc\=[KkkBqZ < bO['>Myn UPAeUB(CU |;yV#["eP؂7[zBs466ߖBpQ`د Z* ,]5W*檿_Og.UX/ l"fWE# <L<P6! n2A{ej^:Ãfo=(մnXx`jXt˺&SE^RIhl/P »n#mE,, ȕ3 2o= ԅDE=1M6⠪EeȣZdOo H6>{|8=xwvٞ`P" @C{ Jlvw1>齃M}̨uα>f]hjTw/Ŭz'Pb\2ļ5]\"p9;'lz *#&2?a}YRklp}X;x.ҭbB& :nkk*:6qr4%~f?7D#U:8jEaFj zPK Utwine/py.typedPK U*2 "twine/repository.pyYn8OA(8Dƹr^ _]AqW@%F"0 ܳܣݓ IIn? g"ȕ _oxJOzg{,'i䳄 #z/DrKH`SVoa/R{ ERɀ$!#bExDM~=\̽-܏bzG`+:*M5 '"BX^v{h1܉j#" u \L_N #hlv{ kwu%eWFCڜ5Szv݈n{R ɕHgq]q庶G0oI jJ/a"a͓O&#NiqTɫNDldL@h 3I 0<.] 򬚜gM!ʍHC~ ! .Q?Qqk> F snȧƥzv7ڬ+|ݩT&T]_g)}ƒnP4GCɩUs:Ƕڿ??ZTyw8pg922E:|ΏO6BK3Hjzh"wK[.SNm?]BJD-"bkWO8SxF6ߊ4RvaP_4.fo7a.v7ge*&:P/L}bnPmmmbl 91B2qx*Q~ߖNuU ,VcZt׮RQ uLFybP=0Ai`oFo@4 `]<5C].j5 MʏmWr恪(MJ9 նK\v o l@>G5FЁiNz:H"x%l-BdRH'^.EE~ZF9JJaOydT}~k)fB?wQ @pNQMb%<! (ተ8:^7rM0@WP,lp,+Y _4TM #HN?|sP} jlC (X"XDuCfG9{wAv].s4?\o̓ 8ZIzFڒ'KBGjIBF7x'Cu &sUc O&f, mn";YÀMƋH¶kWRq!skgF,Jkp9V۩AmSJ܍U/O]7szP3wex(<<+מXW+Gͱ0"6JY ~WBvhjv+C*y^`*tj?|/`"kA= ڮˆܳ<*ٶK(񰽂m8lEOd!Z+Ցf )S֝ <̜G㈦ˑ+_µqW8'w|M&prHv)bv}o V9VcMd_ZXQv"vC3˰fRɎ3JV?(7\B>BOVP qީ9PK UƿE /twine/settings.pyZmo6_A(*/lW@:ΞqY'],BKˌ,H*^߯RHikp8/ϼ}vEHiIg\ EIuT ph8Kž41E+~d#xʮ8TuH6o6ݱ6ɢ'z `<6>2@/' 4Fo!cu)gs3% P91+8xNS Zޱ{^2 `zzWDcͲL5Me<&p0W;w,O~yeZt CTyi%4c5m!9j~=x 5ܒc+ 1~@T/ZaZ% :<9G@k^1"|9ށd#9%5< liLdBkA2҃6%J x#@zDPVQ<(T;7@m#ʢBhVp!Riѯ\EjTdlx0#Ae0H68bZ_]+mjF]ହTdC=@qƈ0/щC-5X:FT`O- ܴP'J]1H\F.!c𲮀v#ht!VYͩv%Kt$N <sFBc&D{1E9&ܝM:!V&E_k;ܹgŵ4,Qs1*pfZDKZmn,^jOd`ۇSP%)Jd ʔ5$/Pn JZm8~70b)-;qAYD絿h֠PCdʳT 8ۻ۰z| h :kʭ|i˗&dDS3ggUTR䕁PXOi'aĜvv:`+gwjj|Z tM;2j(hxM A7+.8*T &ߘ]l|C >r %,>M=ѱ!:P0 z6| $`sHϪHg| f`G'@!0._X| e Нߪ$dURWѱ%7 nWB7ްfTChc$k%)Y4=-Nf|Z,j~w^lnWwz@l+')Y@>mBFm#.[!N_OZ:!7189 Uُ~}tzݼ@hK5{~s$6PH]&Pu (CW%,:⶯޳|)Cíϸ]rG5h{x͠(govp:Ji75u{2lskQ::1U-__z~TEofuXiPQ7!f **gaHLurTvTӤګ->hw_>]OΞIEzJWU﷛svzxEٻ8EfhvUp%o|ihJISs_U_O wh^=h%EMyW V}'TA/KlON Kn+Ty&b9g(bEIyІݲXw{-~-дO_`]` \ R}!w3?}>-lw77F Ae)PpeiFs֦}#cX3mTASNoUDC2;~m(J!~tݽ\7:PK UUs*twine/utils.pyZ[s۸~ׯ@S[vNu|z[N`1-ZQ=o9 Rr!H\svؑZK97ٱ*xkSfa2L v)qo(T{DU'PX-ʰJ !5\0%KdRX`+iG$ ug8~ f:-,hooZ%8MT9*w~vtrq}2ni"ZR^[3fR~,|T(dvUJ#i53+^ ImJyW>_ƿ\~_/g']^./);ޞ]=1˲DI:*Z3eKʙLAb^`s aKQ.FKj`/*\H =*y4%/S"]ͣb&?UEjEρUS LdެT fK߽>,v7`bƫr|jtxdUe˻Dᙕk+®K mj9Y?SqEF w/d2Y,+^3@ $ jE|4T\,Yl89O{Qo|rP};1Eѕ_JR& p`=HXG4NUfT4`gN/^e,=K}f#1`̔ }*1O̪$?AW'ORuG Ђ~R&}!%W|e}+)VҟZ"G!TجYGn * [S$x}p[ x~G@BSRlN5, -!#EXˤAT HD%p8D ʅqݡ>@ i.@;K&B/hfhU1G! X6`3j<?hHyPzvROVVߣ0=rr:7'NsKVw*!XN5P o22((FYn6p*tx%XEtչō YD j۠h}Rd:V~ 0n?Л/:< s[ aM;@ފu>bs dž](Ӡ D|J~+. PX;&\^/ߝ\$ !a˫N>.6<^Q27]}^ΒB\ߍH~>hܼ{ۗ!y&֩%Z4Ԃ8p'#kb+xXB}Hcl|3 ipujj(L+8ܠuzEQbODn*=@Q=JܣSN|xC(78rV rAa]!ծ\EY #U LƿN%+LBUP΂6XL-VDV}:fɥ" e<~Oh IGvp^اf#vM)X@!g&ogas]lh?ɡX.@P wP-8\$)dևp1h%l (ʽKU=n vC~TV!;S9B͕̂7Zh#eR̅cӀPQnfcWż{ 9ǤU̇F Q!l_ȿ :Ku֜ gvT}hC@$CJN!kFE+ h.n*hHߣMns0ʆvhmޥ264ľX[t#V\kܮ=ְBQ2rF^sMV._%Afp@G@Z§5ۀH@p8Mi q{4\گ~Mu {:OX, s|877viZz8 OHX$/Pe}'oWk  AcL&ZrGiAU"Nnly+GѾjpwHUU8Z)FPE`F~W EM&,i Z8wH4TI׵^NE =M`V\^逑ӦYROOi:m6I7ta͝;\Syh㥦'Uѧ )j&: PS'߭kZ){jҽ&iY lPRZp&`CT8Xݎ6Y @lݜBb7 Hsp8't(4SoEv?5#KF3W{;l'GGw8C,!ˋ"Pt3 *L4;r=j"CEJCanfEʎAh]-RBj_PtO7i`Ju"E[z[+z6oby>9, { ;#!\ElP4ng@6peo, (C:N3d &K 9`'Ń,U@b ߪ- BhRbMAc@~z2iD|πBPX+ٟ &/y*F⹩_x;9b~< fNZ7f%Q0# }d[lS5o@A^|.|K@s5ؑIō߶=>Fv$Mݾ=si ĿB{պi8O'Dd4D؝aυu"'֭q}9 E,M*(,~PK U twine/wheel.pyVm6_1ens:~=h%Ql9Qq$!ɗ/KK$۳ϮV~@+]Z;rJIVddL㄂ t k}=jko[>^,ϥ0"L-bDV)5 reLXgIJtL p$ Gs2h>킼]_xNflz5YLfSؽ j2=G| K]ی_Qp\Qցೃl%9hNcy!ouI]i`(1Y~72Q+lӳ86Rf.\,Ia,IG"C?|=~@+a01矈%'oƋh1ET;3WjԾ$7;jaZ(<c?w8=+lx cƷAG,WyY9H dKQlaV<LXt"X!©  C)s(ŗ; qlGIo[߅~;lM( byu>FJzU[x: 9L$ն 77=8Th{S) o|՝.2lGYY/W@/{{ \]MN{bf,o&^xu{r EC&3/OUƣtO!| 78o=:&]ʸMdWt]YU(h8PK Uިtwine/wininst.pyT[o0~ϯ,&9zⵂ۞@ZWEnfmlwM9'M\*~Hl*qnl Δ$V-iE6(Eytn:i|pjGV#\Vl({}H)q|<53s5/]?e8|'.+QTܰ!428ˈdN0C0/ \о$ "A$p-cn6GZ+L݃jl DJ bFg댕.}X45 ` XtRtF@`$N\Nӄ ]^ ^[gѦ9;)M?ycvV֝qes1&?bMe8'$rГVBeaOwMUSrXZӢY=P`_oDqGp^`w$lm[6 '4X@+ % 'W'jÕ ̜A<W-Ԭ%'bccK"ng2G(sfI2b-';`!ᑁ3M"XSz>^Sh hz` %R 4ҙU.NsKbvJB)g=cjL WLBB6^tޯW]3o.ݬ-tpHNlv6YGs2x1N킜M$'>a'PJƐ9c0],ȈiMSFR~τJM&$%>).՚cB녳|4@G7'䄜9)!1Ȕ!0+B(iN~C8̔\bD fy:hm7^ZtX%Ѳ$zZGu@`I 7 AQP9Y,5_ιd| $1K0ؗ Q8T[`yr~{zИZobq7{}IPN._}'5-`qUt}S)}?{[W{;|xr1},'2뻊s#]sɂ-%y߯/d0any+H`OD!s!O0[\;61@G[P  qu X\z*fh \ X%*`jw5VÀSsvNv;?D5͠&A.l0&`uw=8fQJW#f?`4 @þ;#I5R몬+ ] /qjnw$ ,mef/c@01(jpcah-'&^P` I9 &˥J PpΑKf.jq=ԈCj2H Ζj=઄ %] ~4@y:ּ`*UC8Bp),tv5ڸ.4nkْðeNG\@N{oOM=*kFr&ku*\mRgʺH-wgMΆ:kHk+*`oDu PHU@>lz=bQpȕ8%n|Q}pNw<$&t4 rPcyηwWg9S_pifi;TY #禯ߜ#QRmX_vϊԤt i}&m*R{a?=001˥fSu׀ݯ/r0D 0PegFѕq}CМf ִ&:ߵp"bh[kCڡOjY8o1TWOK%UW#+a4,v~3|Ϳ\A@ٶ1P'UEga\SieHOpSr$u|+gQWv 9>P@wPK USX twine/commands/register.py}VoF ~_AK 59F(H}Nu{ɓN?l~H$"?~SEb;ro2U1f*G0U֡lDEwpQ۝~f2G&6փwdW1(:)dLjFcCvjS4"u {y\;(-Re!U_c,pL=|^dM7j0;̿Ÿx4ZO s D` -0V)i"[ @W;i ^BQ2WN:(1|8f[Hc1k+ v=ck=0XZ7FŻ`,J xH6\Y[oxZt6; LIupj\Ųdsf\x5 - ^8$*ZВ*^P #[yPbö1gȖShq\X3M;İGߩ2H8}<_qZS )TŔSǝ[ V"j,HɁNơL8Oؓ3Tm 1e UE&._ l}Q ҡl6@0z靑ו~ S,,48QRTB!8È*! l=y ̪v Xb>`򦧄ROy2Pwb,oh[ jE+f$ꇃZ-8u d*!jݼ9Ɛ RG"maI~j쇷ʱ{S +GnKs|0+[ ֑E[=PxMy* 6.Y9zus6Έ x 8|H@U]itrn[Lc:uјlAp$i1v˰x@lRCzGFA "W(}uNE2﯌M_q~EEx?mlk!iFŌK%8@t?tOZh*eQD*÷)6qV2Ɂ$PV j9.ѐol* @\/;IM](:/ȭSڛ=5|0 ῴM [umWN+I9I/{+>N 5Aij #H]%ė.*B$(aC*@Z9 J7ɴEV꥟.7F9k2>Xשoo 7o;}b׻nFgg7?kz}PLJB|~GzrvB]vPaqFRGUQѝ[o|*U#v^ ʛwPЋ *TELV{`J {77j|xϕCk~&G"nvu+S+=9zѽ8խ~bmֺQ7LБ^,Qd?ǻD(5A‚wM7Cò= J׶#2-Fzz4ODEZk8qƮm=TFz΅:4YkӎMdjA`[MGwX+DC[sk*%{Jh#q"o c%>1q-3)սQ4Gi;&|_~I"ہoà A 8X`,F:sa>PN/|E2o蕁kX du>jsN*Afy4-+p<9hnEq>ZL!a6x(^,!D9uنN6h@*3c7m1q0%xjtc [H0sxf^zr\]O _\t lm9! +[?uNop#9pq~mʮbt;+Ag!n$&X0JgZovQAa ȓCJY ʌ *wV\ѭA9t][cYj:׽b'hI_%kR^7U >Y4[O$0W8`4uϖ""olm*1X ilGZ5zۓY JIX%bDCa#rr>ir$Í4,H?NGr|1C*J&F#ެ]D qBdҚ$ˇ,"[PH9~%2nYZh]8An; BbLH5+Ix!,3H"uDm9d9)YM^/(obV-*CL=`(# Iff_"bUJҎ'yXjTˬT]Nqܳu)"uxGd$:ipxʜ#g\gɋ1dqڞ' сq1ߟ IɸU /r)Y$:_([OAm=cfթB#?a:.5W~DGK,LTƈak|:жOs! 1i{wOEvD8ZksX~TT骡M,2PȀ7C'h@L'R0 21IL<}#J' Q\R[Yjg}9.N܄'(bJ<+1MM ̬\/TxXpONJpjB}P_\x?Zدbf!cƧׅqU* `*#WTlq Sy6ehFެ^ e=lziwtނkv'ZdǏ&F2ZMsR*oP]Kw$̊֠^hY2%y) uP6B>؏1> `ȃ,M21a<)LۢbrOL0 yAR=Wi7%Wjp~zX>5?->]_>.o}~c|N]F/b!*`$lm8e u=&G6&a6}}wB~sWwwۛӾ"ᛏՇn2}WCt;Kv|+ 8ɻ5B P3.4,% v< &!>$҉Vl÷K I׳BA:̮iIng(}>xwfX4E,bԔm )n슛,kMS_ߞ:XfGknzz[CɂS6]v"ńĴrKW*]qlaČA`e8/&yHITvjQ@viF{ ykmKM=tShM@X`p[E%,_Qti#X4OI< u>GGz-Vk,UAWrkE.WT3* gXNG F}v]5S&(wKn` 16;f5%ݨnc0:( whCdN=>|'T6em1!^xfxYvNxJ~9`-4闕I_m?Za󞰫K65"ttm\Bc]}x+$.7Ǟ.a/dه<:%6;[yPK U#twine-4.0.2.dist-info/top_level.txt+)KPK U~twine-4.0.2.dist-info/RECORDuӹH> f@@Q@# b*ħo˾'[o<ǰ8 _θ8 ߴ)C"fڏwyZ{Z{&hc&Q;z>A3Ǻ5 #Rd P~|5%Ei. j6иGu2#͓ȓtuݛaG\'D4/ n_IO80ې+0[ޱm#A1;3Fz IK#W[io$$~WîzVDȾ!mp5S;sNn4oF #[1l>`KuB4sC\Vq0ψ(I_\|8rSh:zӂb~9EuΨKDqqnB}3p:iã]FZ)Y!Ǿ}pʳ|Z;M6%9^9-GsLr(l~`wUaiJ3(O2+AVxcmCnW(V(F#U'T仭L"# 7 _wODӟ[݄6/EMPyhcyM02I}t6WΒAV JQA5PSqhq6!r /z^ &awAYJw|{غz!UW#-qp%XYg@RQ'd]T[M 7 +a*U[Ek=&F0 :z2QCG? ntz zjN9`!zڹlrC=lSD"=};~E=vzGA$&s(zqŇi^ι?70L;w0 C]Iݧ;_,X!A3!{jiPK U䋒?twine/__init__.pyPK U\twine/__main__.pyPK UZ(Nc9 twine/auth.pyPK UG} c twine/cli.pyPK U[Ķtwine/exceptions.pyPK Uo9 +wtwine/package.pyPK U"twine/py.typedPK U*2 " #twine/repository.pyPK UƿE /o.twine/settings.pyPK UUs*=;twine/utils.pyPK U pJtwine/wheel.pyPK UިOtwine/wininst.pyPK UyΞ Rtwine/commands/__init__.pyPK UȽ _?Vtwine/commands/check.pyPK USX _twine/commands/register.pyPK U_c -~dtwine/commands/upload.pyPK U$ %otwine-4.0.2.dist-info/LICENSEPK UG }twine-4.0.2.dist-info/METADATAPK U1\\twine-4.0.2.dist-info/WHEELPK Ua&twine-4.0.2.dist-info/entry_points.txtPK U#twine-4.0.2.dist-info/top_level.txtPK U~twine-4.0.2.dist-info/RECORDPKF././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/twine-4.0.2-py3-none-any.whl.asc0000644000175100017510000000001115231700043022611 0ustar00runnerrunnersignature././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/fixtures/twine-6.2.0-py3-none-any.whl0000644000175100017510000012334715231700043022070 0ustar00runnerrunnerPK|$[%wR'@twine/__init__.pyTMo8W 8r,ZMRThEQ-dv)RKRq;$GP_d߼yC4 PAmV!f/5&mvw`J;BAvd/i)6* "y߸~nЈͥs- tq;+v^],k*`۲ԅ|E+Tlmu쌒oea.RKj>guhx\$ŧSiHFc%>x%V/Po} %4QSK8>Hc6Yo m RbKLTMK]L4gRHvWB_!]s\n>=l~ڤ7kuIVt7g]ύ b[# g`.KjL+VS;РI=4ITAU>ZT²L(e& dzK0l0=MSI~g؂5-ЏslG㔱'5Cđ6w0#wЋԥ3X\L/#>(Mjz b+Cי/1X/&<>|ʄsHḭ+;/bl,7#@N?C̝a 3l/xFsf%B)w wR-?Cz,KfoB-ؽr-LG1cGcM.Gg%+Ei*tAm~p"&70v1 L X#HKŴA_MLDڪFZϓFW@ˠ6C7^})3.y"̘z|O@Iw )֤R戙zc.1r=q.M1UY%Tm4jq:ֶ{ 1"|rz41i}xjtx :52#xv{WniK|gwD1aw[mEL[ +`:0MHӰ6ڗ1 PK|$[:S~` + twine/auth.pyZms6_&CisΝJkju:C$$!Zdo/$ARtgBT1lE'JLK *s&K/϶-PIhQ{a*2~̵;{䤕?JFR+3\,8fe)JBpN6%|uGLDI=j4: ضD-W7 S^B/\%["rr==!I-XXmCYd%{~_LAc$ P(~1/>D2F^}h,>}3;Uj_JBdk`jfĨrkv|\>&PgV굨T7OEIk:{D<~Zlx^;\4V1 q5h4ivnv}ql sHU 8FS2g .Lpy^)&C1L(ALlp%نf%+25ʲ_D( p # ʳJš2#(A8µ{?r2"U*0Q$J' qBă$кb(lY2@ &#ݵ@Y3xHmZzv1m<s={YcvD/e c3rǯl(HyQ))[89Wq,9ВJvȥ軗߼h#Ǔsu^'p%T>x'Tmx` &1:G[=aZ58L&+[Ozm_(1`\4:4 L-Dd-z[`*c8K %Va'g<Q0D, b`yBp z08>~n*Y $4 M |B|ƃ}mzf>Һ*1 g_urHtҴMZΪ2,n[U!`?<woM$ &]BH=~\0g٠y@h}Q`ښ_55NV.zx";!S+f[whZwhV74̂yCT:zXrՉ̰#mÞO)Z`(Am_!WT(Vp86rYG^IcEt Cr۵ TZ ȡW&uͲ2_␨twGѶb)m/'u@s=c߿x?h鵟s  U[Iܻ$m]5rOI'p痭&hCn䳗?஄/8p=L؃VcSݺb)AQ[y:e]H^~qaRC^ch r*zHGf{W϶jZ|ac{hܵu/v\n6uAf7{PK|$[pi twine/cli.pyWmo"7ί6 ,w~JI4!:" =hevō7;e)w|=3? gRg;#ҵc޽?gWZqW+:k\%`[fS%st09tJG?iy,.N8 2j^ [O}*%< Xip*%OJKX=۷UX-S,{_y\11Y"["bWf F$ԿDOMwvhnR%kX ,Ɂ<ÊW%ܖ]%))sXNڕ:A P-*"bpĐBWZ<}t6 KOPki2o5*8JpK^;ͼ';Q=`oY{Wt[E>\:y/gʦvփGQL5v,4(zXIhFUM=P7iVBS{=\tH-QCٗOt~&vo⽪>o1r.NC"2\_ F/T}=9TNFgUͶo HaݵƩjD[邍'ftVHJFyI(;"rGn?Z/ D6ܵSrש kB-PKo6EA*|ٰ-Il ڳ#E w~@jt b O %Ls\4ߠ⤝zcA$mUf?)3X?7u  (zaÐt}gJTȰGϣ%i^9hkoGFX1>N Z;8Pti:vyl473fkl4;qaEWڂ]ѿܧYxUst1,/PK|$[/ertwine/distribution.pyM10{ >Q@A7%Ƕ.H} Hy$*8KN,;Er8 :Q!bץ&,Ȇp! ?SeԞ9{[e nPK|$[њtwine/exceptions.pyXko_q|L0wA77KKԘTIsII#v yC%IRRfJ+ +YnM~L$9:>jm/4f^TFͅ7XEeRZҒtV 5o&Oiw4I* kSRIO &G;IiJ%t&i}PI!FcI`}{_w*iW/ӏ.fN`mXK(Z*QLRX +6veG'LWJHɕV~48_X!ٌ>ͦ d4fN?]_]̧ftyM//Χ>$5l?TCsfR (L4U2S^b!ia USIT΅:R-vJXO~]ve5s.Om#UAej :-2G2.=hv Ki;f=>b9F@MF0I(Ԫc"< +a?)}0n4*'ULVV8rp|w' 5&䎯gNȲzYM %6%̤?R0hϠD_ך+bȫt8 yfvB"LQӽkc|f+[ɲ= Jz=%.)-EۡюmآQTc7޷ǃQc]5 + ܏fV_A#Ճ-jݜP{TiOdA 6xދٶ4Xś|'t(=DqU{ m(EnXs?߯;jryl dc\z&38&0YtNv~:~aN 06>{î}^ul@c8pzY97+1uڥ@2~iZur3鏒^s~y&=hS ǮQ֠>Q4lfWf~yolz3q~q6fۈwy1PD(k!$E/JW5_ ފ"vX.M\I@^XxWSˊyN~3k9V+Df~驧^E3emXˑ,5;Mwcv( M'9ɓ1S7\D=@BxL*-g8\뉼SƩRQT=%~v-D2I{y;P=uM4}>? ^ngӛiꚔ {3`~<2cyA@D+sA j`% J46Ԫ_TnyOB" ^<g^D"B@H@yYQJt“|z#@}y t6`yC =lB>Iս_vѫ.$vuV"&a`^0U<$M=P#_˃~ QE ?>{>ypG[o̼ Ay-[ww D(˻d3]/ov?P~Qla(G(?gƚM<0V&%;>9"lMuƔ~"58OjZւ *˪7BR|0D <گ "ﭺ^M6i/ж׺o Ҟ1P(fq!(t>fP{MOpJe΍Y/]ǰ-tlSZO/j|׸;jI܃uELCjm6Ԯc|2^=K wazr5s0hD`@ W1.BLo[<µ}ȷ]@)ZrE- U-9we߿e Vu]3iVӢ.A`> ? r,h |Z❴5X!dvp G-um/g%qáj`I9n&,G;;`3taEe_#c epcNCjOq%6pdxِ4*UtI1 ̴V =,LMBh,{&`3YZYQdE?Kauy'qtf=+SnDư+xw_~1JSHZLAǫf˲6ӈ2;k4G>mRTu^eYR2Rt'hKNv ƞGʉ8 6?u rs-B,J*ImEVM4&(.qi=dWb˥(0fVk.[D>P9BvTfCJ 'עl H+$ͦ*P? >~+|vVdAE XwQٞ ;tHOT7(Ñ#;1H6vP=-.=F#"\!!ʳ|*O\K8`ײ"ae]Xf?j,PAc"eh,[)hPQ-TZtυ%%{D *,]lF1;M fC6@1Tf\L=OT/@ _Nߤ>zaf'ҫB* O'X؇{23Zf ^G ѧ,[2%H~EJo Pd$J}C+$n kbU3zL"d,h)%y/DsS'U ;iB yc!I t=a&˱JUjߦyV)^%gd4y,w#p UZd{?V(ӅݴM]'t%@D8 !{PktxmE䠧v,DόBfC**b|0Qb F6ѷvvt VđIXul*Y]A6*7cO-um ڱH#/3F~3_:XÌM/ &b"ʸ(72+AK$QDȯ;`Yd‹O 8 Z ˘_^.J=Վ`9)ɑ8DU;i2t[7F ̈_[:3H6LCӈna7+> K~TorA6m l2t:&f@B$Vit/\ƭ㠭Yv?1Y.ҡuFWzhyأ! F=AZ$ˋ3ȫ"?k ,=Lf-AZb}z[W &HSJV|~Lg/!e,eRC6J`KU?ph JbNv}=W*p!X|k?zFX^J[M8L"z86G30$ !Kot Qu^)P/vG_}':zo`tϧR4%OonWD0]dyUthmzw?<<<[%/49:| dLU${LY$ FNr2"cRq%ogY5Ʉ&b+5b&<#X)YȊ9" gB4h 9|%m8B!xu&j 4r>NK(5~9Pk?f)SHKs&4b":S"B: ִ@bWkGDDd%JK>+#4` 1{'7#oNnoF\^ zGN.>_/NG5H?Q,F0 '<yA#Cr&\&/t pb>D%q٥l="<#إtS6 j;B3zG bTuj.yX@䙪gv؂ SU/ k*xP8O~>_cUA *ʹgw l B4 t v4.(iE8kٛ_%u fp\)=3a% `0R &yrr=1KH0 dTzOXtBiEvt w @Ǯ z/D+ gTN xzGSgvH&"ch@ȁ bzj nŀB)" &o+ΈHw-\o ] A% im1<4}h>$4*Qs@.iJs x?ojLm+ۇWc "`IpT uC4.fq2!/~:r 2 " (1tbBeл;f"3eB1J%e/ @dYr$2H:y @SHB)l`w<m &--LSdcb NrYͶqɀzLdm20^"@·ס<0q4-Dlq00%YwMeMeڹ5Tsgm[r~WF,b<4+4M } HVYMo<:P1UhS'a7'G?d*xKUhpP+QȈ}-eJ(G uo&ZcayoHo`-"گr6j|1ݳ:ѿ;óFz>@΁>A9E~!ѥ7rNj>1szݻr~inzhML^!8L둎{*ߊX½{b)_kU!Z`Jf)ՂeW Jɛon5{> r)V?VäUK^?k5ي=ith~Z%p0:ɗm93+3&1O`a5gzsn[Uh'e BhxI \ w0<<$_?v1ch@7E?x] R΁(m*(0*f HBA/qAզpgm\;V;].Wد;lao2nӵum(<B\&~l_@|1"FuаĪ|2iu=J,f_aN7Y 7&ؑ*Fƥ?iZ^qŰ[ ;H'>gFQ^-ANHs1.ZmPE pi/;Khڨ#b$'m?3_>rY?'pטP<Rɬ@oH)d8(+ԒTb8f2Q 2{s%jD C PoH2"Λnze,фWkyth fߥr[;ȯ:qnoGx@ƷAnti;IȐ;ٳ̜ RG]ؿnI&Ԓ[^9Eeh>nkݙF-LTk2k#r{Ry!.Vfϳ[ӽ |UwDw{ܛ0tTVa݆}y0rq>svQT:ۋiܵ+V?tbǶ^'!0F5e6kVWi}#7~<3$B RWʂ+j'fphA2Ղ9žyĵI_ ')5/PK|$[+f twine/sdist.pyVM0WX@"^ Ҳ! .L[CbGj;3v6ierz>޼73c=3nⓗv*Hת kjVWjcn ΍TYj#pU@Cg<**t.پ8{'#W 6jNrcFa6g'xK-26>eff /w//>g&|.}}&H$Uva,A;,vLn,,/@RUJwVV*{҈7z#+Uː-gM£P2GzZ I1oy\KiP`FCO-8Hp@A>7ج*LHrzuhimWUnϡPkάm]duA-rnvI41v}3.}k@Kl1ɜ 7Ipz-ۭϷAiu,K;5vjpt7\pnHE/VK+z:QXJm z?$ bld].xYJ/Ys6ɛY>AǴ;}eG5BG;n/Q),dHdΞ )'#riKN HVbS/וi~!!p ‡"bI8h8  G[6ôA>R!gOȌ; Ff_;^uja ٣Vƚ=B~ nKo}vTA`3'PQUS;1KHPK|$[qd Q3twine/settings.pyZ[o8~ϯ 4\<-b=16ۙ( iGYҊT\sHQ"u4䡵D\s!l  0ޑ(م&y&W sq8IY{_w21Y FL$1 fʃ'y,lCx2"4>e<~~%.Np!pLrG'm<K c~F!FxD< qRx2[NGsa\ Mň2c"AfYlŁf lB.p KR5ذ9dwFK2]:r݊܏l5,|At5隌fȿ>a 'X}M3 Ql[2f1ƀ$\\a4ǖʀ E[sF"(oY??,]*b{m]IHw!?\e'4ёa͘ }? eY,xA:ARP$7n`%%I1iU/e1ݳ/[/=}E$!z {|XS6ɲ${8etӗN{Hο~ A7lK|K[,˧wO*a^uDdHi`T} <QƝ]sp* 0 L%AGoܼ>7/Nb` D̺D9GM٪H)޻\nV> =y S}Uvr@g(KV+zI,iy# Nx4Kvf]s߽I MP#=9=mֳܶ=՗  HT}Z2)hX{wM ڏԞ͊c;υE+leEe3,tb2?h, fB !e'1 &օBI -jAZc $q Lcp.W2? -erq]}[e@yW;]5g)C FQrA@|e͂k腌귕NɇS5U clOdXEG\iE01?xIdV8<{@A7$npl0 *3# (*1v歹:U_[%kT'cF l]Ge_ R5媩~:D k 2Y C7vLw#g8/ps7 uW8]Q/zE=x?Z̦Z=dɦOv,u/;V|YybVoQ*iɪcJL-ͦ\g9ڛAF1*L0KbyŶ4=Cgu?MvO5ީG@l棊+G{W˲=GvwLc(-x"&sH.lqZ0u*Pu`Pu@sqv(n.X~ϋՇm k+E ˉ)_7Ј$Ev NFhpA) T7jUvuaKVFR{+CB}s.pC^U.7rrZG8]'9A)W7йr>NE.<߳{} ^(CNvJxuؑ657h/^AݚP]V6i( FmB^Gt)|Ogb4^Mۺ{5]PAӈKgFՓƝ7[үVH#6HL5 hs>=@^UFdt׼!wx Uڦn?@pEHkDaxXI r6ۢN#P:78wjBlw8l:[Z.oZNq TyfG@v;ȹ- ) @v`MuMgڒjȋ25]7xecQCTOߎ[tX qU(>uQt|+Bv':D.k~vjuoI$uN@<ɸ5 (W,MuqlܳU3<..Yܽ&JBbjˈ3d )e!PM03aۀrJlק Ηޅ -G(^f#+rb,W~9Tl]~h2!;:[^z8ڏ=o<5BZ`óq`1`v48%v(Ur6,'c`G:T'*?^aN7'2⽴+:)COgmiKQ+[/\+ST1#cËeXc1 1;:]zu[I{FU.>'}sH7Z.U:hA^TDնo X|g#uŏ/PK|$[a2twine/utils.pyZoO䫭${E4vE! dZm!T~<{gD] S$p8!K^agynu5ޫ+!KDDʪ"%KN<̀,JɂX} b+eԬRXdͳ\0%kͲ%r3^$m2i,XjYș@́~ >Fk5:,8e{wr{y;\N~p$5LϮG`~Q3͔+APZa8/&~9h !* 8eҘ5k0ŁfWϱI uZ/J`5̲%Fm4mdiDIrAHYQ r;Haty?`3KS(+0@ݬl 2䔥֥A,l/шbB☘TnZLr{J1 mq{=X}B7Y(N{^*4!Wg<ݩG=?A‚kNI@%"Qx\r P8I,\n4&:4 KSjRLfT @U%6m-,!pf'n! A3_b#.[QUЈ/%(̈́Y?R W˲VhxQ&rJ&=eBy Y_=k|=A-"͖tk:խ%NPhJ=f),xwU/ (Z1yl'~M Qǀ }umJKKbIJ (|={Cxmq%i`.=X`*eFit&1 TPš`2⹢x@fMՅuuT Ctsj+"bKQ1dYVX\ V"4jZԵۻBaݳv_;=Db.ٴ-הᾋt,&:k,#Cwݲr^3WEo ۬a4mIl;ocq׏~5*AFy_i/ [Ntu=9_p^ )¿+)}fdX1[$ mJp l9&W(S<2{0m ?N rO8iJl( ?^NN>M5ֈ~ϫN?WUArE0u&x?BAs5[d~O]~3SDnn{SvCC\g;sU[F& A2< _ču s`h6^Y0hhg9R 8N9 UvFPLyzd1{{|Dep']ՃZlESޞ3$~~|Ck<xtzP4!YG.5rO GxzjIDGoV?9pSm0j  Q}}^+Qw]`t 8E>u6(jd҂!+_oM蠬zgW1ȢRWMj95eN ΘVmonm{K($*] n'}em=Hh׾cb46r4 sе[NVd `kn]r 8ճ9{p9%=)p:o2h/̂ !O}qb8l'Dro<<)Km?gkxpgü}~ZkP/֜Ah{oMjݡ"ƈ,ʲ>7ūՇY E9V(\y}tZ+c:ŤhuMy }oxcGtwTC ,9{=jc&dj. ax4;/}兞Ғ3+\ ̃N逑Ӧw <5O R`N$DwVPXB;`g%x^cvw'P˟~ߏwLmMtL@ 2=}4u kR Ǻ-|:7));Q3e0ޤ/Z&TM3wG^smW2FzXffл!@ZÇI?;z4Sjފf8{\6˖F:۷ lS;Y3SG GK:f On]A~ɊTn;[bO_}(e YVEYFΜȘ-η콅rm5KFX*eM F=`yz)9 { F3'njt>CfYǟhw/1tJ9Syi*7f;7 @![)aoAQK!ݚ58$̒dz)?6܁:;s+݉\( {=Xo,^ h R5 ޟOfb+Gwxhy5oox6] UjX=Xw|V1G%Bslj>+-&H$kJfRK ~?4>ubSxF{>8.o{;44a,40={u1SfiPK|$[!  twine/commands/__init__.pyVmo6_qPPD9^:gE`شDDiR;R8H=w :$T+˄jvAH!ץ[-v+_,TˋTo6Le& kre _ي+9(mAQ-% %1724B+x\BDa}?#^Wa{peg",ߥ 2)`*Eם$A/5^R&r 6aDRit};^NAIn Jr@gRD%JgVRXLs(01ոw+ N`4 d4!>vwp}7MGwc\} 6#OhG'q3"lM"ǂL**ŕ~+̤ZB)62vNJK 0JeMR0Ro 2S݈s6gR gAd6?!m7 +ՉGRA$~X+}+t7L<<"s:~jw]V8]S:7 pX2_,N=x\  ゴ 屣6gErzǽ+8'fnR 7`IOof0vR8jDP4#fʺE9㑺ĝPid%8]Lsr=#ﮧz o|7s2?1?(Y3Q3e<(h4c$L|#)A&WTDž"Tdwyn@)s %38νR7D*T®^ $ uU^CO C}TFcD^n@m6yd R:Jaz0>rSWz͏2QEb<@GgK6x$y8NC-$aF<Ӏ` 'o0  xqI(Gr7vfו"z~yUe~znʝ+mMZ3:{J ܽ=`P%5@Wc"89ux 6hQqQEh8)iL@Cy?,&M!#LA[X9f 16\""R2Qk^&"<;NT(b6SYSA i*ޛ[ ɧhwl^s@:cGF:IS话E7 "IyZ~x8D:tDnJ.# ^+:,1/9+| ^a Mh#.tKQADm$Z +ҡ}Pw[wX;hSG΅0!V8S޲oI[=& -\7/NMz/Aƞ6A@L.")o7QOG4ƯQa갲OF`LJS۾>toQSmL1Gi dnPuglFmJjW%--C:hu.~">8\zv|jC\j %Nq a'-+4| 5d\Պl7M`u*4I#G&JYyZ9`x&]ӖuX#ʺz/cyhW )& K‚5Idqsl{yi@ݵ%.H/ISh(& 1=7WQ^[Ֆqh}0zɏ(&5 )tkoo/x%瓫tvt5ܕ>D CDцsa&P1Ҵ5+b@jY3 YQTOHG'4HA6;[vP/!W\kI}AtZYԑԆ.c; +_9B;:>ԁ ,;fPK|$[ Y twine/commands/register.py}VoF ~_AG %Cx#vWA`_$J>Liw:FIv6?$H?~) ÿTR*,2;\e2TinA3i,6 0*Zf; ?+EAt"Lwd1 ;-ELFm*cF6pE8 P@* .XZߗEpv4A" ^<_]a<pH#˼2b5 s1̿TDI`bBsqOdf=hi ڃHQU˗ШqE4W!1]Wey _z>[#<,nÂ` @k?!&L q5X$\Y%2L}CSKÝ4/(K+{rVTP>-BD jXrtO$L Yx獥^12aop k Of H0mGa/6uV'cGx<=BA W*#GxABUJ$LAeF Ԯ"!S\Oq9g!l|H* Y`LZAn.0Bڝ~6 H`=S[:JeVTF.O_gieyAF{"VxZH2NYњ0ߠ y%TD[dmE=4D{4RѠ%hxaS<QϹv籋&on4Q߇":,!vd-x}2΁ 1Eowse?ؑ~1:8 X ('_PWQPK|$[)ɾU &twine/commands/upload.pyZQo6~ϯ {pu$MH(,H*!)Qm.Xlb gf(~,Je)%3R,Z5uQl>O({NzѰoegUɋݚ&;XQ"cM EROj/wg~J˪dG!qAnEA¦j؊oXYh"fmK*jd zB2l-#m$ W'Zu>:ƭzrp^N&Zv>xqz~y{Z3%Hv.6נLb ǗJ=Sk% xxt5WdR%yʫ Wd-'cbݔ}:9^߲vzuyv1Ogc&OxJJaBϺ!& ^.lY= ES ORzH)JnʖQW)øZ\i?C-A^3e[g25ckA m}H?R+Y:+B݀Yz-WOh8㎕Z<]B# WRt-Jhoo/9Oՠ'7خ/(:a*^IO~6h񄶀?5!or2B)‡EarYV DMS."_e(nXՆ0[Nrx4$}].r0U <>v Bl6{4 WnZm JlhWiȦV?]Wc\!:A叮6y䆭!fwW4u;p*xI|oJ9G+ʄ o R"BŪ ދheDbv?w淶yeEjt$^ r&5 D<'Ae*@~:4:AyKΤ;,.`Qi'*: >eekn} aJ& k:ƻ  30_M 8'ãJ@dpfCB>j PCQc Q>4T%4o!ekA)NX% x \֙Jn 8%3/dv1\{OPHFYԺ ͣ>_#U*`  ګuX 2bPxş[h/eL[σmw8es `KNU;RUgkh т+, h UĶEށvԦ !ֲ(nr߰v@- r3V) ۃh -lr{3=պIPg\^knt(I<:[~ 0 EiZPk llĆNg7Wӫ_ǮhMoˎoUt(/} z%AŎHy8 D[r X=[ Ҕ؇ݨ[←ύ(e61?r'y6"XH3$"־a}Dlؐ6=ɲn:--QTfg{ƚИ!(A3jy/ 3SqpGkbia~VOtag uѓ5ҖQAhogNQ ci"e]x9` M>z*Tttx́zlJ:2)K(e)>~mαe4VtKh\XP:_\џ!" hzҸQN VS pj;*7:{M3>7BF@*5ʗNY<}8|voz B!#'[ ?ZBN5 /T5o%wH¾FK4، y.1pݶnI04ntKzIfAKwm\(1VM_Z)󆅀$&[Ő ҵP;3?%=fn6i[p2 yrKoW ;"[)"_;bKf<g1xY9^R(8C:ݒkƗ! ٖQL5u[i?^}hxI[?4KY |k@Me&fxE?VMt AV*75#U1'q~ukCaDxl.04%r[rE|qzX5nvߨLA  Ym %Z*e8kπPA#lO+LQv˞ .7% m@#JJB+W$yJS1oIk`M A[y__(~b 4|)56dtr}wO^l*KR` kRɑJȂ*pqt*K7%61F_D#| Wl@Vl!9q NS(֔_ 5fginAuQB%v#`ǟ:GQ<#;ty;.y5K[0P g84Nh,b  Yض=Uݚj VoGI۴8-wSXnOVMӅ GШĵPK|$[$ %&twine-6.2.0.dist-info/licenses/LICENSEZ[s6~xfgFI}rcU73>B$(aC*@Z9 J7ɴEV꥟.7F9k2>Xשoo 7o;}b׻nFgg7?kz}PLJB|~GzrvB]vPaqFRGUQѝ[o|*U#v^ ʛwPЋ *TELV{`J {77j|xϕCk~&G"nvu+S+=9zѽ8խ~bmֺQ7LБ^,Qd?ǻD(5A‚wM7Cò= J׶#2-Fzz4ODEZk8qƮm=TFz΅:4YkӎMdjA`[MGwX+DC[sk*%{Jh#q"o c%>1q-3)սQ4Gi;&|_~I"ہoà A 8X`,F:sa>PN/|E2o蕁kX du>jsN*Afy4-+p<9hnEq>ZL!a6x(^,!D9uنN6h@*3c7m1q0%xjtc [H0sxf^zr\]O _\t lm9! +[?uNop#9pq~mʮbt;+Ag!n$&X0JgZovQAa ȓCJY ʌ *wV\ѭA9t][cYj:׽b'hI_%kR^7U >Y4[O$0W8`4uϖ""olm*1X ilGZ5zۓY JIX%bDCa#rr>ir$Í4,H?NGr|1C*J&F#ެ]D qBdҚ$ˇ,"[PH9~%2nYZh]8An; BbLH5+Ix!,3H"uDm9d9)YM^/(obV-*CL=`(# Iff_"bUJҎ'yXjTˬT]Nqܳu)"uxGd$:ipxʜ#g\gɋ1dqڞ' сq1ߟ IɸU /r)Y$:_([OAm=cfթB#?a:.5W~DGK,LTƈak|:жOs! 1i{wOEvD8ZksX~TT骡M,2PȀ7C'h@L'R0 21IL<}#J' Q\R[Yjg}9.N܄'(bJ<+1MM ̬\/TxXpONJpjB}P_\x?Zدbf!cƧׅqU* `*#WTlq Sy6ehFެ^ e=lziwtނkv'ZdǏ&F2ZMsR*oP]Kw$̊֠^hY2%y) uP6B>؏1> `ȃ,M21a<)LۢbrOL0 yAR=Wi7%Wjp~zX>5?->]_>.o}~c|N]F/b!*`$lm8e u=&G6&a6}}wB~sWwwۛӾ"ᛏՇn2}WCt;Kv|+ 8ɻ5B P3.4,% v< &!>$҉Vl÷K I׳BA:̮iIng(}>xwfX4E,bԔm )n슛,kMS_ߞ:XfGknzz[CɂS6]v"ńĴrKW*]qlaČA`e8/&yHITvjQ@viF{ ykmKM=tShM@X`p[E%,_Qti#X4OI< uƢ䘝[@吳wU.@e uޒ2X;fDjFݒ&pGuPG F/TF//z/Z,2>ćb;XEAj9B!J.?%c5ώW9?^xcv[#_+6 Pz`3#J. ?%!,] uO^HN7&^ka}ӱqVB/Ռ mR/b#Յ#5\e=ywkhG>ATWzWĶTMh ulyG6 GDCʱv6MSp &9^q pCk –j7g ,QdxxP#~$܋Zk%HS)bƪI_Y"wzm&ޯ2sAqaA >6%MlC9 }qd4Ic,PduZQ(MF U) ,jMP`MI▜CʭOHY6)1uvn U^eFpSs&{ &fG&?zc{wY9jIB7fR[Y+?wSkqY|4|,5mn&j zPK|$[a&twine-6.2.0.dist-info/entry_points.txte[ E]+pA+dJmr.{k˭n.\e_7BhvW)AxcG6Ka>;[yPK|$[#twine-6.2.0.dist-info/top_level.txt+)KPK|$[;;twine-6.2.0.dist-info/RECORDuɲX}= bi &QeCOVV}_?k3:AHE5JЗ>eN';Wf1),П<ư-Ua^Kh񼇣(,u,y8>NXRjýpJi̽iȔcIV3,x's"@7PS8FRoVZlQbhe(N󸞋sJs}B!l0#q.7JKQڙ1Nyt8|d6wAa _o L7>Ή yk8}2'aXgonhSƮ{Oamx+ /~ϸ܄gnjw39XR(HÐmWN$Ais ⏳a$j^8h(R ҵ;2; [ mUAw1ƨY|q+EDGBHO/#6oilpJp5Knq{<;"y8~ Bp@::wM(vQ(N7%Ζۇ0ׄPw+KN[r2Ⱦve12 /O UtTG_ZNr }s̍:EH'a,?f1%4;-rcrN]/ޞtCaoDPn&a'Ң5F9>q۰-";E^\cw1 J0`E;ց'†ΪiDLMIj)v7OeѰ%7PK|$[%wR'@twine/__init__.pyPK|$[o2+Vtwine/__main__.pyPK|$[:S~` + twine/auth.pyPK|$[pi twine/cli.pyPK|$[/er!twine/distribution.pyPK|$[њtwine/exceptions.pyPK|$[(!3"twine/package.pyPK|$[2twine/py.typedPK|$[|O( @#2twine/repository.pyPK|$[+f  >twine/sdist.pyPK|$[qd Q3wAtwine/settings.pyPK|$[a2 Otwine/utils.pyPK|$[n `twine/wheel.pyPK|$[!  etwine/commands/__init__.pyPK|$[bf mjtwine/commands/check.pyPK|$[ Y ttwine/commands/register.pyPK|$[)ɾU &ytwine/commands/upload.pyPK|$[$ %&]twine-6.2.0.dist-info/licenses/LICENSEPK|$[C'bhtwine-6.2.0.dist-info/METADATAPK|$[t\[twine-6.2.0.dist-info/WHEELPK|$[a&Vtwine-6.2.0.dist-info/entry_points.txtPK|$[#twine-6.2.0.dist-info/top_level.txtPK|$[;;Dtwine-6.2.0.dist-info/RECORDPK././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/helpers.py0000644000175100017510000000373215231700043015470 0ustar00runnerrunner# Copyright 2016 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. """Test functions useful across twine's tests.""" import io import os import pathlib import tarfile import textwrap import zipfile TESTS_DIR = pathlib.Path(__file__).parent FIXTURES_DIR = os.path.join(TESTS_DIR, "fixtures") SDIST_FIXTURE = os.path.join(FIXTURES_DIR, "twine-1.5.0.tar.gz") WHEEL_FIXTURE = os.path.join(FIXTURES_DIR, "twine-4.0.2-py3-none-any.whl") NEW_SDIST_FIXTURE = os.path.join(FIXTURES_DIR, "twine-1.6.5.tar.gz") NEW_WHEEL_FIXTURE = os.path.join(FIXTURES_DIR, "twine-6.2.0-py3-none-any.whl") def build_archive(path, name, archive_format, files): filepath = path / f"{name}.{archive_format}" if archive_format == "tar.gz": with tarfile.open(filepath, "x:gz") as archive: for mname, content in files.items(): if isinstance(content, tarfile.TarInfo): content.name = mname archive.addfile(content) else: data = textwrap.dedent(content).encode("utf8") member = tarfile.TarInfo(mname) member.size = len(data) archive.addfile(member, io.BytesIO(data)) return filepath if archive_format == "zip": with zipfile.ZipFile(filepath, mode="w") as archive: for mname, content in files.items(): archive.writestr(mname, textwrap.dedent(content)) return filepath raise ValueError(format) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_auth.py0000644000175100017510000003305715231700043016031 0ustar00runnerrunnerimport base64 import getpass import logging import platform import re import time import typing as t import pytest import requests.auth from twine import auth from twine import exceptions from twine import utils @pytest.fixture def config() -> utils.RepositoryConfig: return dict(repository="system") def test_get_username_keyring_defers_to_prompt(monkeypatch, entered_username, config): class MockKeyring: @staticmethod def get_credential(system, user): return None monkeypatch.setattr(auth, "keyring", MockKeyring) username = auth.Resolver(config, auth.CredentialInput()).username assert username == "entered user" def test_get_username_keyring_not_installed_defers_to_prompt( monkeypatch, entered_username, config ): monkeypatch.setattr(auth, "keyring", None) username = auth.Resolver(config, auth.CredentialInput()).username assert username == "entered user" def test_get_password_keyring_defers_to_prompt(monkeypatch, entered_password, config): class MockKeyring: @staticmethod def get_password(system, user): return None monkeypatch.setattr(auth, "keyring", MockKeyring) pw = auth.Resolver(config, auth.CredentialInput("user")).password assert pw == "entered pw" def test_get_password_keyring_not_installed_defers_to_prompt( monkeypatch, entered_password, config ): monkeypatch.setattr(auth, "keyring", None) pw = auth.Resolver(config, auth.CredentialInput("user")).password assert pw == "entered pw" def test_no_password_defers_to_prompt(monkeypatch, entered_password, config): config.update(password=None) pw = auth.Resolver(config, auth.CredentialInput("user")).password assert pw == "entered pw" def test_empty_password_bypasses_prompt(monkeypatch, entered_password, config): config.update(password="") pw = auth.Resolver(config, auth.CredentialInput("user")).password assert pw == "" def test_no_username_non_interactive_aborts(config): with pytest.raises(exceptions.NonInteractive): auth.Private(config, auth.CredentialInput()).username def test_no_password_non_interactive_aborts(config): with pytest.raises(exceptions.NonInteractive): auth.Private(config, auth.CredentialInput("user")).password def test_get_username_and_password_keyring_overrides_prompt( monkeypatch, config, caplog ): caplog.set_level(logging.INFO, "twine") class MockKeyring: @staticmethod def get_credential(system, user): return auth.CredentialInput( "real_user", f"real_user@{system} sekure pa55word" ) @staticmethod def get_password(system, user): cred = MockKeyring.get_credential(system, user) if user != cred.username: raise RuntimeError("unexpected username") return cred.password monkeypatch.setattr(auth, "keyring", MockKeyring) res = auth.Resolver(config, auth.CredentialInput()) assert res.username == "real_user" assert res.password == "real_user@system sekure pa55word" assert caplog.messages == [ "Querying keyring for username", "username set from keyring", "Querying keyring for password", "password set from keyring", ] @pytest.fixture def keyring_missing_get_credentials(monkeypatch): """Simulate keyring prior to 15.2 that does not have the 'get_credential' API.""" monkeypatch.delattr(auth.keyring, "get_credential") @pytest.fixture def entered_username(monkeypatch): monkeypatch.setattr(auth, "input", lambda prompt: "entered user", raising=False) def test_get_username_keyring_missing_get_credentials_prompts( entered_username, keyring_missing_get_credentials, config ): assert auth.Resolver(config, auth.CredentialInput()).username == "entered user" def test_get_username_keyring_missing_non_interactive_aborts( entered_username, keyring_missing_get_credentials, config ): with pytest.raises(exceptions.NonInteractive): auth.Private(config, auth.CredentialInput()).username def test_get_password_keyring_missing_non_interactive_aborts( entered_username, keyring_missing_get_credentials, config ): with pytest.raises(exceptions.NonInteractive): auth.Private(config, auth.CredentialInput("user")).password def test_get_username_keyring_runtime_error_logged( entered_username, monkeypatch, config, caplog ): class FailKeyring: """Simulate missing keyring backend raising RuntimeError on get_credential.""" @staticmethod def get_credential(system, username): raise RuntimeError("fail!") monkeypatch.setattr(auth, "keyring", FailKeyring) assert auth.Resolver(config, auth.CredentialInput()).username == "entered user" assert re.search( r"Error getting username from keyring.+Traceback.+RuntimeError: fail!", caplog.text, re.DOTALL, ) def test_get_password_keyring_runtime_error_logged( entered_username, entered_password, monkeypatch, config, caplog ): class FailKeyring: """Simulate missing keyring backend raising RuntimeError on get_password.""" @staticmethod def get_password(system, username): raise RuntimeError("fail!") monkeypatch.setattr(auth, "keyring", FailKeyring) assert auth.Resolver(config, auth.CredentialInput()).password == "entered pw" assert re.search( r"Error getting password from keyring.+Traceback.+RuntimeError: fail!", caplog.text, re.DOTALL, ) def _raise_home_key_error(): """Simulate environment from https://github.com/pypa/twine/issues/889.""" try: raise KeyError("HOME") except KeyError: raise KeyError("uid not found: 999") def test_get_username_keyring_key_error_logged( entered_username, monkeypatch, config, caplog ): class FailKeyring: @staticmethod def get_credential(system, username): _raise_home_key_error() monkeypatch.setattr(auth, "keyring", FailKeyring) assert auth.Resolver(config, auth.CredentialInput()).username == "entered user" assert re.search( r"Error getting username from keyring" r".+Traceback" r".+KeyError: 'HOME'" r".+KeyError: 'uid not found: 999'", caplog.text, re.DOTALL, ) def test_get_password_keyring_key_error_logged( entered_username, entered_password, monkeypatch, config, caplog ): class FailKeyring: @staticmethod def get_password(system, username): _raise_home_key_error() monkeypatch.setattr(auth, "keyring", FailKeyring) assert auth.Resolver(config, auth.CredentialInput()).password == "entered pw" assert re.search( r"Error getting password from keyring" r".+Traceback" r".+KeyError: 'HOME'" r".+KeyError: 'uid not found: 999'", caplog.text, re.DOTALL, ) def test_logs_cli_values(caplog, config): caplog.set_level(logging.INFO, "twine") res = auth.Resolver(config, auth.CredentialInput("username", "password")) assert res.username == "username" assert res.password == "password" assert caplog.messages == [ "username set by command options", "password set by command options", ] def test_logs_config_values(config, caplog): caplog.set_level(logging.INFO, "twine") config.update(username="username", password="password") res = auth.Resolver(config, auth.CredentialInput()) assert res.username == "username" assert res.password == "password" assert caplog.messages == [ "username set from config file", "password set from config file", ] @pytest.mark.parametrize( "password, warning", [ ("", "Your password is empty"), ("\x16", "Your password contains control characters"), ("entered\x16pw", "Your password contains control characters"), ], ) def test_warns_for_empty_password( password, warning, monkeypatch, entered_username, config, caplog, ): # Avoiding additional warning "No recommended backend was available" monkeypatch.setattr(auth.keyring, "get_password", lambda system, user: None) monkeypatch.setattr(getpass, "getpass", lambda prompt: password) assert auth.Resolver(config, auth.CredentialInput()).password == password assert caplog.messages[0].startswith(warning) @pytest.mark.skipif( platform.machine() in {"ppc64le", "s390x"}, reason="keyring module is optional on ppc64le and s390x", ) def test_keyring_module(): assert auth.keyring is not None def test_resolver_authenticator_config_authentication(config): config.update(username="username", password="password") res = auth.Resolver(config, auth.CredentialInput()) assert isinstance(res.authenticator, requests.auth.HTTPBasicAuth) def test_resolver_authenticator_credential_input_authentication(config): res = auth.Resolver(config, auth.CredentialInput("username", "password")) assert isinstance(res.authenticator, requests.auth.HTTPBasicAuth) def test_resolver_authenticator_trusted_publishing_authentication(config): res = auth.Resolver( config, auth.CredentialInput(username="__token__", password="skip-stdin") ) res._tp_token = auth.TrustedPublishingToken( success=True, token="fake-tp-token", ) assert isinstance(res.authenticator, auth.TrustedPublishingAuthenticator) class MockResponse: def __init__(self, status_code: int, json: t.Any) -> None: self.status_code = status_code self._json = json def json(self, *args, **kwargs) -> t.Any: return self._json def raise_for_status(self) -> None: if 400 <= self.status_code: raise requests.exceptions.HTTPError() def ok(self) -> bool: return self.status_code == 200 class MockSession: def __init__( self, get_response_list: t.List[MockResponse], post_response_list: t.List[MockResponse], ) -> None: self.post_counter = self.get_counter = 0 self.get_response_list = get_response_list self.post_response_list = post_response_list def get(self, url: str, **kwargs) -> MockResponse: response = self.get_response_list[self.get_counter] self.get_counter += 1 return response def post(self, url: str, **kwargs) -> MockResponse: response = self.post_response_list[self.post_counter] self.post_counter += 1 return response def test_trusted_publish_authenticator_refreshes_token(monkeypatch, config): def make_session(): return MockSession( get_response_list=[ MockResponse(status_code=200, json={"audience": "fake-aud"}) ], post_response_list=[ MockResponse( status_code=200, json={ "success": True, "token": "new-token", "expires": int(time.time()) + 900, }, ), ], ) def detect_credential(*args, **kwargs) -> str: return "fake-oidc-token" config.update({"repository": utils.TEST_REPOSITORY}) res = auth.Resolver(config, auth.CredentialInput(username="__token__")) res._tp_token = auth.TrustedPublishingToken( success=True, token="expiring-tp-token", ) res._expires = int(time.time()) + 4 * 60 monkeypatch.setattr(auth, "detect_credential", detect_credential) monkeypatch.setattr(auth.utils, "make_requests_session", make_session) authenticator = auth.TrustedPublishingAuthenticator(resolver=res) prepped_req = requests.models.PreparedRequest() prepped_req.prepare_headers({}) request = authenticator(prepped_req) assert ( request.headers["Authorization"] == f"Basic {base64.b64encode(b'__token__:new-token').decode()}" ) def test_trusted_publish_authenticator_reuses_token(monkeypatch, config): def make_session(): return MockSession( get_response_list=[ MockResponse(status_code=200, json={"audience": "fake-aud"}) ], post_response_list=[ MockResponse( status_code=200, json={ "success": True, "token": "new-token", "expires": int(time.time()) + 900, }, ), ], ) def detect_credential(*args, **kwargs) -> str: return "fake-oidc-token" config.update({"repository": utils.TEST_REPOSITORY}) res = auth.Resolver(config, auth.CredentialInput(username="__token__")) res._tp_token = auth.TrustedPublishingToken( success=True, token="valid-tp-token", ) res._expires = int(time.time()) + 900 monkeypatch.setattr(auth, "detect_credential", detect_credential) monkeypatch.setattr(auth.utils, "make_requests_session", make_session) authenticator = auth.TrustedPublishingAuthenticator(resolver=res) prepped_req = requests.models.PreparedRequest() prepped_req.prepare_headers({}) request = authenticator(prepped_req) assert ( request.headers["Authorization"] == f"Basic {base64.b64encode(b'__token__:valid-tp-token').decode()}" ) def test_inability_to_make_token_raises_error(): class MockResolver: def make_trusted_publishing_token(self) -> None: return None authenticator = auth.TrustedPublishingAuthenticator( resolver=MockResolver(), ) with pytest.raises(exceptions.TrustedPublishingFailure): authenticator(None) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_check.py0000644000175100017510000001405315231700043016140 0ustar00runnerrunner# Copyright 2018 Dustin Ingram # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import logging import pretend import pytest from tests import helpers from twine.commands import check class TestWarningStream: def setup_method(self): self.stream = check._WarningStream() def test_write_match(self): self.stream.write(":2: (WARNING/2) Title underline too short.") assert self.stream.getvalue() == "line 2: Warning: Title underline too short.\n" def test_write_nomatch(self): self.stream.write("this does not match") assert self.stream.getvalue() == "this does not match" def test_str_representation(self): self.stream.write(":2: (WARNING/2) Title underline too short.") assert str(self.stream) == "line 2: Warning: Title underline too short." def test_fails_no_distributions(caplog): assert not check.check([]) assert caplog.record_tuples == [ ( "twine.commands.check", logging.ERROR, "No files to check.", ), ] def build_sdist_with_metadata(path, metadata): name = "test" version = "1.2.3" sdist = helpers.build_archive( path, f"{name}-{version}", "tar.gz", { f"{name}-{version}/README": "README", f"{name}-{version}/PKG-INFO": metadata, }, ) return str(sdist) @pytest.mark.parametrize("strict", [False, True]) def test_warns_missing_description(strict, tmp_path, capsys, caplog): sdist = build_sdist_with_metadata( tmp_path, """\ Metadata-Version: 2.1 Name: test Version: 1.2.3 """, ) assert check.check([sdist], strict=strict) is strict assert capsys.readouterr().out == f"Checking {sdist}: " + ( "FAILED due to warnings\n" if strict else "PASSED with warnings\n" ) assert caplog.record_tuples == [ ( "twine.commands.check", logging.WARNING, "`long_description_content_type` missing. defaulting to `text/x-rst`.", ), ( "twine.commands.check", logging.WARNING, "`long_description` missing.", ), ] def test_fails_rst_syntax_error(tmp_path, capsys, caplog): sdist = build_sdist_with_metadata( tmp_path, """\ Metadata-Version: 2.1 Name: test-package Version: 1.2.3 Description-Content-Type: text/x-rst ============ """, ) assert check.check([sdist]) assert capsys.readouterr().out == f"Checking {sdist}: FAILED\n" assert caplog.record_tuples == [ ( "twine.commands.check", logging.ERROR, "`long_description` has syntax errors in markup " "and would not be rendered on PyPI.\n" "line 2: Warning: Transition at the end of the document.", ), ] def test_fails_rst_no_content(tmp_path, capsys, caplog): sdist = build_sdist_with_metadata( tmp_path, """\ Metadata-Version: 2.1 Name: test-package Version: 1.2.3 Description-Content-Type: text/x-rst test-package ============ """, ) assert check.check([sdist]) assert capsys.readouterr().out == f"Checking {sdist}: FAILED\n" assert len(caplog.record_tuples) == 1 # Note: we intentionally don't check the full error message below, # since readme_renderer/docutils doesn't guarantee it. error = caplog.record_tuples[0] assert error[0] == "twine.commands.check" assert error[1] == logging.ERROR assert "syntax errors" in error[2] def test_passes_rst_description(tmp_path, capsys, caplog): sdist = build_sdist_with_metadata( tmp_path, """\ Metadata-Version: 2.1 Name: test-package Version: 1.2.3 Description-Content-Type: text/x-rst test-package ============ A test package. """, ) assert not check.check([sdist]) assert capsys.readouterr().out == f"Checking {sdist}: PASSED\n" assert not caplog.record_tuples @pytest.mark.parametrize("content_type", ["text/markdown", "text/plain"]) def test_passes_markdown_description(content_type, tmp_path, capsys, caplog): sdist = build_sdist_with_metadata( tmp_path, f"""\ Metadata-Version: 2.1 Name: test-package Version: 1.2.3 Description-Content-Type: {content_type} # test-package A test package. """, ) assert not check.check([sdist]) assert capsys.readouterr().out == f"Checking {sdist}: PASSED\n" assert not caplog.record_tuples def test_main(monkeypatch): check_result = pretend.stub() check_stub = pretend.call_recorder(lambda a, strict=False: check_result) monkeypatch.setattr(check, "check", check_stub) assert check.main(["dist/*"]) == check_result assert check_stub.calls == [pretend.call(["dist/*"], strict=False)] def test_check_expands_glob(monkeypatch): """Regression test for #1187.""" warning_stream = pretend.stub() warning_stream_cls = pretend.call_recorder(lambda: warning_stream) monkeypatch.setattr(check, "_WarningStream", warning_stream_cls) check_file = pretend.call_recorder(lambda fn, stream: ([], True)) monkeypatch.setattr(check, "_check_file", check_file) assert not check.main([f"{helpers.FIXTURES_DIR}/*"]) # check_file is called more than once, indicating the glob has been expanded assert len(check_file.calls) > 1 # TODO: Test print() color output # TODO: Test log formatting ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_cli.py0000644000175100017510000000203215231700043015624 0ustar00runnerrunner# Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import pretend import pytest from twine import cli from twine.commands import upload def test_dispatch_to_subcommand(monkeypatch): replaced_main = pretend.call_recorder(lambda args: None) monkeypatch.setattr(upload, "main", replaced_main) cli.dispatch(["upload", "path/to/file"]) assert replaced_main.calls == [pretend.call(["path/to/file"])] def test_catches_enoent(): with pytest.raises(SystemExit): cli.dispatch(["non-existent-command"]) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_commands.py0000644000175100017510000000504015231700043016660 0ustar00runnerrunnerimport os import pytest from tests import helpers from twine import commands from twine import exceptions def test_ensure_wheel_files_uploaded_first(): files = commands._group_wheel_files_first( ["twine/foo.py", "twine/first.whl", "twine/bar.py", "twine/second.whl"] ) expected = [ "twine/first.whl", "twine/second.whl", "twine/foo.py", "twine/bar.py", ] assert expected == files def test_ensure_if_no_wheel_files(): files = commands._group_wheel_files_first(["twine/foo.py", "twine/bar.py"]) expected = ["twine/foo.py", "twine/bar.py"] assert expected == files def test_find_dists_expands_globs(): files = sorted(commands._find_dists(["twine/__*.py"])) expected = [ os.path.join("twine", "__init__.py"), os.path.join("twine", "__main__.py"), ] assert expected == files def test_find_dists_errors_on_invalid_globs(): with pytest.raises(exceptions.InvalidDistribution): commands._find_dists(["twine/*.rb"]) def test_find_dists_handles_real_files(): expected = [ "twine/__init__.py", "twine/__main__.py", "twine/cli.py", "twine/utils.py", "twine/wheel.py", ] files = commands._find_dists(expected) assert expected == files def test_split_inputs(): """Split inputs into dists, signatures, and attestations.""" inputs = [ helpers.WHEEL_FIXTURE, helpers.WHEEL_FIXTURE + ".asc", helpers.WHEEL_FIXTURE + ".build.attestation", helpers.WHEEL_FIXTURE + ".publish.attestation", helpers.SDIST_FIXTURE, helpers.SDIST_FIXTURE + ".asc", helpers.NEW_WHEEL_FIXTURE, helpers.NEW_WHEEL_FIXTURE + ".frob.attestation", helpers.NEW_SDIST_FIXTURE, ] inputs = commands._split_inputs(inputs) assert inputs.dists == [ helpers.WHEEL_FIXTURE, helpers.SDIST_FIXTURE, helpers.NEW_WHEEL_FIXTURE, helpers.NEW_SDIST_FIXTURE, ] expected_signatures = { os.path.basename(dist) + ".asc": dist + ".asc" for dist in [helpers.WHEEL_FIXTURE, helpers.SDIST_FIXTURE] } assert inputs.signatures == expected_signatures assert inputs.attestations_by_dist == { helpers.WHEEL_FIXTURE: [ helpers.WHEEL_FIXTURE + ".build.attestation", helpers.WHEEL_FIXTURE + ".publish.attestation", ], helpers.SDIST_FIXTURE: [], helpers.NEW_WHEEL_FIXTURE: [helpers.NEW_WHEEL_FIXTURE + ".frob.attestation"], helpers.NEW_SDIST_FIXTURE: [], } ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_integration.py0000644000175100017510000001330015231700043017400 0ustar00runnerrunnerimport contextlib import datetime import functools import pathlib import platform import re import secrets import subprocess import sys from types import SimpleNamespace import pytest import requests from twine import __main__ as dunder_main from twine import cli pytestmark = [pytest.mark.enable_socket] skip_if_windows = pytest.mark.skipif( platform.system() == "Windows", reason="pytest-services fixtures don't support Windows", ) run = functools.partial(subprocess.run, check=True) @pytest.fixture(scope="session") def sampleproject_dist(tmp_path_factory: pytest.TempPathFactory): checkout = tmp_path_factory.mktemp("sampleproject", numbered=False) tag = datetime.datetime.now().strftime("%Y%m%d%H%M%S%f") run(["git", "clone", "https://github.com/pypa/sampleproject", str(checkout)]) pyproject = checkout / "pyproject.toml" pyproject.write_text( pyproject.read_text() .replace( 'name = "sampleproject"', 'name = "twine-sampleproject"', ) .replace( 'version = "3.0.0"', f'version = "3.0.0post{tag}"', ) ) run([sys.executable, "-m", "build", "--sdist"], cwd=checkout) [dist, *_] = (checkout / "dist").glob("*") # NOTE: newer versions of setuptools (invoked via build) adhere to PEP 625, # causing the dist name to be `twine_sampleproject` instead of # `twine-sampleproject`. Both are allowed here for now, but the hyphenated # version can be removed eventually. # See: https://github.com/pypa/setuptools/issues/3593 assert dist.name in ( f"twine-sampleproject-3.0.0.post{tag}.tar.gz", f"twine_sampleproject-3.0.0.post{tag}.tar.gz", ) return dist sampleproject_token = ( "pypi-AgENdGVzdC5weXBpLm9yZwIkNDgzYTFhMjEtMzEwYi00NT" "kzLTkwMzYtYzc1Zjg4NmFiMjllAAJEeyJwZXJtaXNzaW9ucyI6IH" "sicHJvamVjdHMiOiBbInR3aW5lLXNhbXBsZXByb2plY3QiXX0sIC" "J2ZXJzaW9uIjogMX0AAAYg2kBZ1tN8lj8dlmL3ScoVvr_pvQE0t" "6PKqigoYJKvw3M" ) @pytest.mark.xfail(reason="service is unreliable (#684)") def test_pypi_upload(sampleproject_dist): command = [ "upload", "--repository-url", "https://test.pypi.org/legacy/", "--username", "__token__", "--password", sampleproject_token, str(sampleproject_dist), ] cli.dispatch(command) @pytest.mark.xfail(reason="service is unreliable (#684)") def test_pypi_error(sampleproject_dist, monkeypatch, capsys): command = [ "twine", "upload", "--repository-url", "https://test.pypi.org/legacy/", "--username", "foo", "--password", "bar", str(sampleproject_dist), ] monkeypatch.setattr(sys, "argv", command) message = ( r"HTTPError: 403 Forbidden from https://test\.pypi\.org/legacy/" + r".+authentication information" ) error = dunder_main.main() assert error captured = capsys.readouterr() assert re.search(message, captured.out, re.DOTALL) @pytest.fixture( params=[ "twine-1.5.0.tar.gz", "twine-4.0.2-py3-none-any.whl", "twine-1.6.5.tar.gz", "twine-6.2.0-py3-none-any.whl", ] ) def uploadable_dist(request): return pathlib.Path(__file__).parent / "fixtures" / request.param @pytest.fixture(scope="session") def devpi_server(request, port_getter, watcher_getter, tmp_path_factory): server_dir = tmp_path_factory.mktemp("devpi") username = "foober" password = secrets.token_urlsafe() port = port_getter() url = f"http://localhost:{port}/" repo = f"{url}/{username}/dev/" run(["devpi-init", "--serverdir", server_dir, "--root-passwd", password]) def ready(): with contextlib.suppress(Exception): return requests.get(url) watcher_getter( name="devpi-server", arguments=["--port", str(port), "--serverdir", server_dir], checker=ready, # Needed for the correct execution order of finalizers request=request, ) def devpi_run(cmd): return run(["devpi", "--clientdir", server_dir / "client", *cmd]) devpi_run(["use", url + "root/pypi/"]) devpi_run(["user", "--create", username, f"password={password}"]) devpi_run(["login", username, "--password", password]) devpi_run(["index", "-c", "dev"]) return SimpleNamespace(url=repo, username=username, password=password) @skip_if_windows def test_devpi_upload(devpi_server, uploadable_dist): command = [ "upload", "--repository-url", devpi_server.url, "--username", devpi_server.username, "--password", devpi_server.password, str(uploadable_dist), ] cli.dispatch(command) @pytest.fixture(scope="session") def pypiserver_instance(request, port_getter, watcher_getter, tmp_path_factory): port = port_getter() url = f"http://localhost:{port}/" def ready(): with contextlib.suppress(Exception): return requests.get(url) watcher_getter( name="pypi-server", arguments=[ "--port", str(port), # allow anonymous uploads "-P", ".", "-a", ".", tmp_path_factory.mktemp("packages"), ], checker=ready, # Needed for the correct execution order of finalizers request=request, ) return SimpleNamespace(url=url) @skip_if_windows def test_pypiserver_upload(pypiserver_instance, uploadable_dist): command = [ "upload", "--repository-url", pypiserver_instance.url, "--username", "any", "--password", "any", str(uploadable_dist), ] cli.dispatch(command) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_main.py0000644000175100017510000000513115231700043016004 0ustar00runnerrunner# Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import sys import pretend import pytest import requests from twine import __main__ as dunder_main from twine.commands import upload # Hard-coding control characters for red text; couldn't find a succinct alternative RED_ERROR = "\x1b[31mERROR \x1b[0m" PLAIN_ERROR = "ERROR " def _unwrap_lines(text): # Testing wrapped lines was ugly and inconsistent across environments return " ".join(line.strip() for line in text.splitlines()) def test_exception_handling(monkeypatch, capsys): monkeypatch.setattr(sys, "argv", ["twine", "upload", "missing.whl"]) error = dunder_main.main() assert error captured = capsys.readouterr() assert _unwrap_lines(captured.out) == ( f"{RED_ERROR} InvalidDistribution: Cannot find file (or expand pattern): " "'missing.whl'" ) @pytest.mark.parametrize( ("status_code", "status_phrase", "reason"), [(400, "Bad Request", "Error reason"), (599, "Unknown Status", "Another reason")], ) def test_http_exception_handling( monkeypatch, capsys, status_code, status_phrase, reason ): monkeypatch.setattr(sys, "argv", ["twine", "upload", "test.whl"]) monkeypatch.setattr( upload, "upload", pretend.raiser( requests.HTTPError( response=pretend.stub( url="https://example.org", status_code=status_code, reason=reason ) ) ), ) error = dunder_main.main() assert error captured = capsys.readouterr() assert _unwrap_lines(captured.out) == ( f"{RED_ERROR} HTTPError: {status_code} {status_phrase} " f"from https://example.org {reason}" ) def test_no_color_exception(monkeypatch, capsys): monkeypatch.setattr(sys, "argv", ["twine", "--no-color", "upload", "missing.whl"]) error = dunder_main.main() assert error captured = capsys.readouterr() assert _unwrap_lines(captured.out) == ( f"{PLAIN_ERROR} InvalidDistribution: Cannot find file (or expand pattern): " "'missing.whl'" ) # TODO: Test verbose output formatting ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_package.py0000644000175100017510000004053715231700043016464 0ustar00runnerrunner# Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import json import string import packaging import pretend import pytest from packaging import metadata from packaging import version from twine import exceptions from twine import package as package_file from . import helpers def test_sign_file(monkeypatch): replaced_check_call = pretend.call_recorder(lambda args: None) monkeypatch.setattr(package_file.subprocess, "check_call", replaced_check_call) filename = "tests/fixtures/deprecated-pypirc" package = package_file.PackageFile( filename=filename, comment=None, metadata=metadata.RawMetadata(name="deprecated-pypirc", version="1.2.3"), python_version=None, filetype=None, ) try: package.sign("gpg2", None) except OSError: pass args = ("gpg2", "--detach-sign", "-a", filename) assert replaced_check_call.calls == [pretend.call(args)] def test_sign_file_with_identity(monkeypatch): replaced_check_call = pretend.call_recorder(lambda args: None) monkeypatch.setattr(package_file.subprocess, "check_call", replaced_check_call) filename = "tests/fixtures/deprecated-pypirc" package = package_file.PackageFile( filename=filename, comment=None, metadata=metadata.RawMetadata(name="deprecated-pypirc", version="1.2.3"), python_version=None, filetype=None, ) try: package.sign("gpg", "identity") except OSError: pass args = ("gpg", "--detach-sign", "--local-user", "identity", "-a", filename) assert replaced_check_call.calls == [pretend.call(args)] def test_run_gpg_raises_exception_if_no_gpgs(monkeypatch): replaced_check_call = pretend.raiser(FileNotFoundError("not found")) monkeypatch.setattr(package_file.subprocess, "check_call", replaced_check_call) gpg_args = ("gpg", "--detach-sign", "-a", "pypircfile") with pytest.raises(exceptions.InvalidSigningExecutable) as err: package_file.PackageFile.run_gpg(gpg_args) assert "executables not available" in err.value.args[0] def test_run_gpg_raises_exception_if_not_using_gpg(monkeypatch): replaced_check_call = pretend.raiser(FileNotFoundError("not found")) monkeypatch.setattr(package_file.subprocess, "check_call", replaced_check_call) gpg_args = ("not_gpg", "--detach-sign", "-a", "pypircfile") with pytest.raises(exceptions.InvalidSigningExecutable) as err: package_file.PackageFile.run_gpg(gpg_args) assert "not_gpg executable not available" in err.value.args[0] def test_run_gpg_falls_back_to_gpg2(monkeypatch): def check_call(arg_list): if arg_list[0] == "gpg": raise FileNotFoundError("gpg not found") replaced_check_call = pretend.call_recorder(check_call) monkeypatch.setattr(package_file.subprocess, "check_call", replaced_check_call) gpg_args = ("gpg", "--detach-sign", "-a", "pypircfile") package_file.PackageFile.run_gpg(gpg_args) gpg2_args = replaced_check_call.calls[1].args assert gpg2_args[0][0] == "gpg2" def test_package_signed_name_is_correct(): filename = "tests/fixtures/deprecated-pypirc" package = package_file.PackageFile( filename=filename, comment=None, metadata=metadata.RawMetadata(name="deprecated-pypirc", version="1.2.3"), python_version=None, filetype=None, ) assert package.signed_basefilename == "deprecated-pypirc.asc" assert package.signed_filename == (filename + ".asc") def test_package_add_attestations(tmp_path): package = package_file.PackageFile.from_filename(helpers.WHEEL_FIXTURE, None) assert package.attestations is None attestations = [] for i in range(3): path = tmp_path / f"fake.{i}.attestation" path.write_text(json.dumps({"fake": f"attestation {i}"})) attestations.append(str(path)) package.add_attestations(attestations) assert package.attestations == [ {"fake": "attestation 0"}, {"fake": "attestation 1"}, {"fake": "attestation 2"}, ] def test_package_add_attestations_invalid_json(tmp_path): package = package_file.PackageFile.from_filename(helpers.WHEEL_FIXTURE, None) assert package.attestations is None attestation = tmp_path / "fake.publish.attestation" attestation.write_text("this is not valid JSON") with pytest.raises( exceptions.InvalidDistribution, match="invalid JSON in attestation" ): package.add_attestations([attestation]) @pytest.mark.parametrize( "pkg_name,expected_name", [ (string.ascii_letters, string.ascii_letters), (string.digits, string.digits), (string.punctuation, "-.-"), ("mosaik.SimConfig", "mosaik.SimConfig"), ("mosaik$$$$.SimConfig", "mosaik-.SimConfig"), ], ) def test_package_safe_name_is_correct(pkg_name, expected_name): package = package_file.PackageFile( filename="tests/fixtures/deprecated-pypirc", comment=None, metadata=metadata.RawMetadata(name=pkg_name, version="1.2.3"), python_version=None, filetype=None, ) assert package.safe_name == expected_name def test_metadata_keys_consistency(): """Check that the translation keys exist in the respective ``TypedDict``.""" raw_keys = metadata.RawMetadata.__annotations__.keys() if version.Version(packaging.__version__) < version.Version("24.1"): # ``packaging`` version 24.0 and earlier do not know about the # License-Expression and License-File metadata fields yet. raw_keys = raw_keys | set(("license_files", "license_expression")) assert set(package_file._RAW_TO_PACKAGE_METADATA.keys()).issubset(raw_keys) package_keys = package_file.PackageMetadata.__annotations__.keys() assert set(package_file._RAW_TO_PACKAGE_METADATA.values()).issubset(package_keys) @pytest.mark.parametrize("gpg_signature", [(None), (pretend.stub())]) @pytest.mark.parametrize("attestation", [(None), ({"fake": "attestation"})]) def test_metadata_dictionary_values(gpg_signature, attestation): """Pass values from ``metadata.RawMetadata`` through to ``PackageMetadata``.""" meta = metadata.RawMetadata( metadata_version=pretend.stub(), name="whatever", version="1.2.3", platforms=pretend.stub(), summary=pretend.stub(), description=pretend.stub(), keywords=pretend.stub(), home_page=pretend.stub(), author=pretend.stub(), author_email=pretend.stub(), license=pretend.stub(), supported_platforms=pretend.stub(), download_url=pretend.stub(), classifiers=pretend.stub(), provides=pretend.stub(), requires=pretend.stub(), obsoletes=pretend.stub(), maintainer=pretend.stub(), maintainer_email=pretend.stub(), requires_dist=pretend.stub(), provides_dist=pretend.stub(), obsoletes_dist=pretend.stub(), requires_python=pretend.stub(), requires_external=pretend.stub(), project_urls=pretend.stub(), description_content_type=pretend.stub(), provides_extra=pretend.stub(), dynamic=pretend.stub(), license_expression=pretend.stub(), license_files=pretend.stub(), ) package = package_file.PackageFile( filename="tests/fixtures/twine-4.0.2-py3-none-any.whl", comment=pretend.stub(), metadata=meta, python_version=pretend.stub(), filetype=pretend.stub(), ) package.gpg_signature = gpg_signature if attestation: package.attestations = [attestation] result = package.metadata_dictionary() # Medata 1.0 - PEP 241 assert result["metadata_version"] == meta["metadata_version"] assert result["name"] == package.safe_name assert result["version"] == package.version == meta["version"] assert result["platform"] == meta["platforms"] assert result["summary"] == meta["summary"] assert result["description"] == meta["description"] assert result["keywords"] == meta["keywords"] assert result["home_page"] == meta["home_page"] assert result["author"] == meta["author"] assert result["author_email"] == meta["author_email"] assert result["license"] == meta["license"] # Metadata 1.1 - PEP 314 assert result["supported_platform"] == meta["supported_platforms"] assert result["download_url"] == meta["download_url"] assert result["classifiers"] == meta["classifiers"] assert result["provides"] == meta["provides"] assert result["requires"] == meta["requires"] assert result["obsoletes"] == meta["obsoletes"] # Metadata 1.2 - PEP 345 assert result["maintainer"] == meta["maintainer"] assert result["maintainer_email"] == meta["maintainer_email"] assert result["requires_dist"] == meta["requires_dist"] assert result["provides_dist"] == meta["provides_dist"] assert result["obsoletes_dist"] == meta["obsoletes_dist"] assert result["requires_python"] == meta["requires_python"] assert result["requires_external"] == meta["requires_external"] assert result["project_urls"] == meta["project_urls"] # Metadata 2.1 - PEP 566 assert result["description_content_type"] == meta["description_content_type"] assert result["provides_extra"] == meta["provides_extra"] # Metadata 2.2 - PEP 643 assert result["dynamic"] == meta["dynamic"] # Metadata 2.4 - PEP 639 assert result["license_expression"] == meta["license_expression"] assert result["license_file"] == meta["license_files"] # Additional metadata assert result["comment"] == package.comment assert result["filetype"] == package.filetype assert result["pyversion"] == package.python_version # GPG signature assert result.get("gpg_signature") == gpg_signature # Attestations if attestation: assert result["attestations"] == json.dumps(package.attestations) else: assert "attestations" not in result TWINE_4_0_2_WHEEL_HEXDIGEST = package_file.Hexdigest( "929bc3c280033347a00f847236564d1c52a3e61b1ac2516c97c48f3ceab756d8", "3a38a3f27a9e8ce45523d7d1e28c09e9085b61a98dab15d35ec086f36a44b37c", ) def test_hash_manager(): """Generate hexdigest via HashManager.""" filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" hasher = package_file.HashManager(filename) hasher.hash() assert hasher.hexdigest() == TWINE_4_0_2_WHEEL_HEXDIGEST @pytest.mark.parametrize("exception_class", [TypeError, ValueError]) def test_fips_hash_manager_blake2(exception_class, monkeypatch): """Generate hexdigest without BLAKE2 when hashlib is using FIPS mode.""" replaced_blake2b = pretend.raiser(exception_class("fipsmode")) monkeypatch.setattr(package_file.hashlib, "blake2b", replaced_blake2b) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" hasher = package_file.HashManager(filename) hasher.hash() hashes = TWINE_4_0_2_WHEEL_HEXDIGEST._replace(blake2=None) assert hasher.hexdigest() == hashes def test_fips_metadata_excludes_blake2(monkeypatch): """Generate a valid metadata dictionary for Nexus when FIPS is enabled. See also: https://github.com/pypa/twine/issues/775 """ replaced_blake2b = pretend.raiser(ValueError("fipsmode")) monkeypatch.setattr(package_file.hashlib, "blake2b", replaced_blake2b) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" pf = package_file.PackageFile.from_filename(filename, None) mddict = pf.metadata_dictionary() assert "blake2_256_digest" not in mddict @pytest.mark.parametrize( "read_data, exception_message", [ pytest.param( b"Metadata-Version: 102.3\nName: test-package\nVersion: 1.0.0\n", "'102.3' is not a valid metadata version", id="unsupported Metadata-Version", ), pytest.param( b"Metadata-Version: 2.3\nName: test-package\nVersion: UNKNOWN\n", "'UNKNOWN' is invalid for 'version'", id="invalid Version", ), pytest.param( b"Metadata-Version: 2.2\nName: test-package\nVersion: UNKNOWN\n", "'UNKNOWN' is invalid for 'version'", id="invalid Version", ), pytest.param( b"Metadata-Version: 2.3\n", "'name' is a required field; 'version' is a required field", id="missing Name and Version", ), pytest.param( b"Metadata-Version: 2.2\n", "'name' is a required field; 'version' is a required field", id="missing Name and Version", ), pytest.param( b"Metadata-Version: 2.3\nVersion: 1.0.0\n", "'name' is a required field", id="missing Name", ), pytest.param( b"Metadata-Version: 2.2\nVersion: 1.0.0\n", "'name' is a required field", id="missing Name", ), pytest.param( b"Metadata-Version: 2.3\nName: test-package\n", "'version' is a required field", id="missing Version", ), pytest.param( b"Metadata-Version: 2.2\nName: test-package\n", "'version' is a required field", id="missing Version", ), pytest.param( b"Metadata-Version: 2.2\nName: test-package\nVersion: 1.0.0\nFoo: bar\n", "unrecognized or malformed field 'foo'", id="unrecognized field", ), ], ) def test_pkginfo_returns_no_metadata(read_data, exception_message, monkeypatch): """Raise an exception when pkginfo can't interpret the metadata.""" monkeypatch.setattr(package_file.wheel.Wheel, "read", lambda _: read_data) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" with pytest.raises(exceptions.InvalidDistribution) as err: package_file.PackageFile.from_filename(filename, comment=None) assert exception_message in err.value.args[0] def test_malformed_from_file(monkeypatch): """Raise an exception when malformed package file triggers EOFError.""" filename = "tests/fixtures/malformed.tar.gz" with pytest.raises(exceptions.InvalidDistribution) as err: package_file.PackageFile.from_filename(filename, comment=None) assert "Invalid distribution file" in err.value.args[0] def test_package_from_sdist(): filename = "tests/fixtures/twine-1.5.0.tar.gz" p = package_file.PackageFile.from_filename(filename, comment=None) assert p.python_version == "source" def test_package_from_unrecognized_file_error(): filename = "twine/package.py" with pytest.raises(exceptions.InvalidDistribution) as err: package_file.PackageFile.from_filename(filename, comment=None) assert "Unknown distribution format" in err.value.args[0] def test_setuptools_license_file_invalid(monkeypatch): """Drop License-File metadata entries if Metadata-Version is less than 2.4.""" read_data = ( "Metadata-Version: 2.1\n" "Name: test-package\n" "Version: 1.0.0\n" "License-File: LICENSE\n" ) monkeypatch.setattr(package_file.wheel.Wheel, "read", lambda _: read_data) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" package = package_file.PackageFile.from_filename(filename, comment=None) meta = package.metadata_dictionary() assert "license_file" not in meta @pytest.mark.skipif( version.Version(packaging.__version__) < version.Version("24.1"), reason="packaging is too old", ) def test_setuptools_license_file_valid(monkeypatch): """License-File metadata entries are kept when Metadata-Version is 2.4.""" read_data = ( "Metadata-Version: 2.4\n" "Name: test-package\n" "Version: 1.0.0\n" "License-File: LICENSE\n" ) monkeypatch.setattr(package_file.wheel.Wheel, "read", lambda _: read_data) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" package = package_file.PackageFile.from_filename(filename, comment=None) meta = package.metadata_dictionary() assert "license_file" in meta ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_parse_config_encoding.py0000644000175100017510000001175715231700043021400 0ustar00runnerrunnerimport builtins import logging import pathlib from twine import utils def _write_utf8_ini(path, username: str = "テストユーザー🐍") -> None: """Write an ini file encoded in UTF-8. Including an emoji makes decoding more likely to fail under locales like cp932. """ content = f"""[server-login] username = {username} password = secret """ # Write explicitly as UTF-8 bytes # (so reading will fail if the reader assumes a different encoding) path.write_bytes(content.encode("utf-8")) def test_parse_config_triggers_utf8_fallback(monkeypatch, caplog, tmp_path): """Test UTF-8 fallback when UnicodeDecodeError is raised. If the first read of the file raises a UnicodeDecodeError, _parse_config should take the UTF-8 fallback path. This test simulates a decode failure on the first I/O and then allows normal I/O so the fallback is exercised. """ ini_path = tmp_path / "pypirc" expected_username = "テストユーザー🐍" _write_utf8_ini(ini_path, expected_username) # Coordinate a single "raise once" behavior across multiple common I/O # entrypoints. call = {"n": 0} original_open = builtins.open original_read_text = pathlib.Path.read_text def open_raise_once(*args, **kwargs): # Only raise on the very first attempted open; afterwards delegate # to real open. if call["n"] == 0: call["n"] += 1 # UnicodeDecodeError(encoding, object, start, end, reason) raise UnicodeDecodeError("utf-8", b"", 0, 1, "simulated") return original_open(*args, **kwargs) def read_text_raise_once(self, encoding=None, errors=None): # Only raise on the very first attempted read_text; afterwards # delegate. if call["n"] == 0: call["n"] += 1 raise UnicodeDecodeError("utf-8", b"", 0, 1, "simulated") return original_read_text(self, encoding=encoding, errors=errors) # Patch both builtins.open and pathlib.Path.read_text to be robust # against whichever API _parse_config uses internally. monkeypatch.setattr(builtins, "open", open_raise_once) monkeypatch.setattr(pathlib.Path, "read_text", read_text_raise_once, raising=True) caplog.set_level(logging.INFO, logger="twine") parser = utils._parse_config(str(ini_path)) # Ensure the parsed result is correct (file was read as UTF-8 after # fallback) assert parser.get("server-login", "username") == expected_username # Ensure a log message indicating the fallback is present assert ( "Configuration file not readable with default locale encoding, " "trying UTF-8" in caplog.text ) def test_parse_config_no_fallback_when_default_utf8(monkeypatch, caplog, tmp_path): """Test normal parsing when default encoding is UTF-8. When the default encoding is UTF-8, no fallback is necessary and the file should be parsed via the normal path. To make this deterministic across Python versions/environments, force I/O calls without an explicit encoding to use UTF-8 by wrapping open / Path.read_text. """ ini_path = tmp_path / "pypirc" expected_username = "テストユーザー🐍" _write_utf8_ini(ini_path, expected_username) # Wrap builtins.open so that if encoding is not provided, we force # utf-8. original_open = builtins.open def open_force_utf8( file, mode="r", buffering=-1, encoding=None, errors=None, newline=None, closefd=True, opener=None, ): if encoding is None and "b" not in mode: # delegate to real open but force utf-8 as default encoding return original_open( file, mode, buffering=buffering, encoding="utf-8", errors=errors, newline=newline, closefd=closefd, opener=opener, ) return original_open( file, mode, buffering=buffering, encoding=encoding, errors=errors, newline=newline, closefd=closefd, opener=opener, ) # Wrap pathlib.Path.read_text similarly original_read_text = pathlib.Path.read_text def read_text_force_utf8(self, encoding=None, errors=None): if encoding is None: return original_read_text(self, encoding="utf-8", errors=errors) return original_read_text(self, encoding=encoding, errors=errors) monkeypatch.setattr(builtins, "open", open_force_utf8) monkeypatch.setattr(pathlib.Path, "read_text", read_text_force_utf8, raising=True) caplog.set_level(logging.INFO, logger="twine") parser = utils._parse_config(str(ini_path)) # Ensure the parsed result is correct assert parser.get("server-login", "username") == expected_username # Verify that the used configuration file path is present in the logs. assert f"Using configuration from {ini_path}" in caplog.text ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_register.py0000644000175100017510000001020215231700043016677 0ustar00runnerrunnerimport pretend import pytest from twine import cli from twine import exceptions from twine.commands import register from . import helpers @pytest.fixture() def register_settings(make_settings): """Return a factory function for settings.Settings for register.""" return make_settings(""" [pypi] repository: https://test.pypi.org/legacy/ username:foo password:bar """) def test_successful_register(register_settings): """Return a successful result for a valid repository url and package.""" stub_response = pretend.stub( is_redirect=False, status_code=200, headers={"location": "https://test.pypi.org/legacy/"}, raise_for_status=lambda: None, ) stub_repository = pretend.stub( register=lambda package: stub_response, close=lambda: None ) register_settings.create_repository = lambda: stub_repository result = register.register(register_settings, helpers.WHEEL_FIXTURE) assert result is None def test_exception_for_redirect(register_settings): """Raise an exception when repository URL results in a redirect.""" repository_url = register_settings.repository_config["repository"] redirect_url = "https://malicious.website.org/danger/" stub_response = pretend.stub( is_redirect=True, status_code=301, headers={"location": redirect_url}, ) stub_repository = pretend.stub( register=lambda package: stub_response, close=lambda: None ) register_settings.create_repository = lambda: stub_repository with pytest.raises( exceptions.RedirectDetected, match=rf"{repository_url}.+{redirect_url}.+\nIf you trust these URLs", ): register.register(register_settings, helpers.WHEEL_FIXTURE) def test_non_existent_package(register_settings): """Raise an exception when package file doesn't exist.""" stub_repository = pretend.stub() register_settings.create_repository = lambda: stub_repository package = "/foo/bar/baz.whl" with pytest.raises( exceptions.PackageNotFound, match=f'"{package}" does not exist on the file system.', ): register.register(register_settings, package) @pytest.mark.parametrize("repo", ["pypi", "testpypi"]) def test_values_from_env_pypi(monkeypatch, repo): """Use env vars for settings when run from command line.""" def none_register(*args, **settings_kwargs): pass replaced_register = pretend.call_recorder(none_register) monkeypatch.setattr(register, "register", replaced_register) testenv = { "TWINE_REPOSITORY": repo, "TWINE_USERNAME": "pypiuser", "TWINE_PASSWORD": "pypipassword", "TWINE_CERT": "/foo/bar.crt", } for key, value in testenv.items(): monkeypatch.setenv(key, value) cli.dispatch(["register", helpers.WHEEL_FIXTURE]) register_settings = replaced_register.calls[0].args[0] assert "pypipassword" == register_settings.password assert "pypiuser" == register_settings.username assert "/foo/bar.crt" == register_settings.cacert def test_values_from_env_not_pypi(monkeypatch, write_config_file): """Use env vars for settings when run from command line.""" write_config_file(""" [distutils] index-servers = notpypi [notpypi] repository: https://upload.example.org/legacy/ username:someusername password:password """) def none_register(*args, **settings_kwargs): pass replaced_register = pretend.call_recorder(none_register) monkeypatch.setattr(register, "register", replaced_register) testenv = { "TWINE_REPOSITORY": "notpypi", "TWINE_USERNAME": "someusername", "TWINE_PASSWORD": "pypipassword", "TWINE_CERT": "/foo/bar.crt", } for key, value in testenv.items(): monkeypatch.setenv(key, value) cli.dispatch(["register", helpers.WHEEL_FIXTURE]) register_settings = replaced_register.calls[0].args[0] assert "pypipassword" == register_settings.password assert "someusername" == register_settings.username assert "/foo/bar.crt" == register_settings.cacert ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_repository.py0000644000175100017510000002670615231700043017312 0ustar00runnerrunner# Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import logging from contextlib import contextmanager import packaging import pretend import pytest import requests from packaging import version from twine import package from twine import repository from twine import utils @pytest.fixture() def default_repo(): return repository.Repository( repository_url=utils.DEFAULT_REPOSITORY, username="username", password="password", ) def test_gpg_signature_structure_is_preserved(): """Preserve 'gpg_signature' key when converting metadata.""" data = { "gpg_signature": ("filename.asc", "filecontent"), } tuples = repository.Repository._convert_metadata_to_list_of_tuples(data) assert tuples == [("gpg_signature", ("filename.asc", "filecontent"))] def test_iterables_are_flattened(): """Flatten iterable metadata to list of tuples.""" data = { "platform": ["UNKNOWN"], } tuples = repository.Repository._convert_metadata_to_list_of_tuples(data) assert tuples == [("platform", "UNKNOWN")] data = { "platform": ["UNKNOWN", "ANOTHERPLATFORM"], } tuples = repository.Repository._convert_metadata_to_list_of_tuples(data) assert tuples == [("platform", "UNKNOWN"), ("platform", "ANOTHERPLATFORM")] def test_all_metadata_fields_are_flattened(monkeypatch): """Verify that package metadata fields are correctly flattened.""" if version.Version(packaging.__version__) < version.Version("24.1"): # All metadata fields up to metadata version 2.3 metadata = open("tests/fixtures/everything.metadata23") else: # All metadata fields up to metadata version 2.4 metadata = open("tests/fixtures/everything.metadata24") monkeypatch.setattr(package.wheel.Wheel, "read", metadata.read) filename = "tests/fixtures/twine-4.0.2-py3-none-any.whl" data = package.PackageFile.from_filename( filename, comment="comment" ).metadata_dictionary() tuples = repository.Repository._convert_metadata_to_list_of_tuples(data) # Verifies that all metadata fields parsed by ``packaging.metadata`` are # correctly flattened into a list of (str, str) tuples. This does not # apply to the ``gpg_signature`` field, but this field is not added here # as there are specific tests for it. for key, value in tuples: assert isinstance(key, str) assert isinstance(value, str) def test_set_client_certificate(default_repo): """Set client certificate for session.""" assert default_repo.session.cert is None default_repo.set_client_certificate(("/path/to/cert", "/path/to/key")) assert default_repo.session.cert == ("/path/to/cert", "/path/to/key") def test_set_certificate_authority(default_repo): """Set certificate authority for session.""" assert default_repo.session.verify is True default_repo.set_certificate_authority("/path/to/cert") assert default_repo.session.verify == "/path/to/cert" def test_make_user_agent_string(default_repo): """Add twine to User-Agent session header.""" assert "twine/" in default_repo.session.headers["User-Agent"] def response_with(**kwattrs): resp = requests.Response() for attr, value in kwattrs.items(): if hasattr(resp, attr): setattr(resp, attr, value) return resp def test_package_is_uploaded_404s(default_repo): """Return False when the project API response status isn't 200.""" default_repo.session = pretend.stub( get=lambda url, headers: response_with(status_code=404) ) package = pretend.stub(safe_name="fake", version="2.12.0") assert default_repo.package_is_uploaded(package) is False def test_package_is_uploaded_200s_with_no_releases(default_repo): """Return False when the list of releases for a project is empty.""" default_repo.session = pretend.stub( get=lambda url, headers: response_with( status_code=200, _content=b'{"releases": {}}', _content_consumed=True ), ) package = pretend.stub(safe_name="fake", version="2.12.0") assert default_repo.package_is_uploaded(package) is False def test_package_is_uploaded_with_releases_using_cache(default_repo): """Return True when the package is in the releases cache.""" default_repo._releases_json_data = {"fake": {"0.1": [{"filename": "fake.whl"}]}} package = pretend.stub( safe_name="fake", version="0.1", basefilename="fake.whl", ) assert default_repo.package_is_uploaded(package) is True def test_package_is_uploaded_with_releases_not_using_cache(default_repo): """Return True when the package is in the list of releases for a project.""" default_repo.session = pretend.stub( get=lambda url, headers: response_with( status_code=200, _content=b'{"releases": {"0.1": [{"filename": "fake.whl"}]}}', _content_consumed=True, ), ) package = pretend.stub( safe_name="fake", version="0.1", basefilename="fake.whl", ) assert default_repo.package_is_uploaded(package, bypass_cache=True) is True def test_package_is_uploaded_different_filenames(default_repo): """Return False when the package is not in the list of releases for a project.""" default_repo.session = pretend.stub( get=lambda url, headers: response_with( status_code=200, _content=b'{"releases": {"0.1": [{"filename": "fake.whl"}]}}', _content_consumed=True, ), ) package = pretend.stub( safe_name="fake", version="0.1", basefilename="foo.whl", ) assert default_repo.package_is_uploaded(package) is False def test_package_is_registered(default_repo): """Return API response from registering a package.""" package = pretend.stub( basefilename="fake.whl", metadata_dictionary=lambda: {"name": "fake"} ) resp = response_with(status_code=200) setattr(resp, "raw", pretend.stub()) setattr(resp.raw, "close", lambda: None) default_repo.session = pretend.stub( post=lambda url, data, allow_redirects, headers: resp ) assert default_repo.register(package) @pytest.mark.parametrize("disable_progress_bar", [True, False]) def test_disable_progress_bar_is_forwarded_to_rich( monkeypatch, tmpdir, disable_progress_bar, default_repo ): """Toggle display of upload progress bar.""" @contextmanager def ProgressStub(*args, **kwargs): assert "disable" in kwargs assert kwargs["disable"] == disable_progress_bar yield pretend.stub( add_task=lambda description, total: None, update=lambda task_id, completed: None, ) monkeypatch.setattr(repository.rich.progress, "Progress", ProgressStub) default_repo.disable_progress_bar = disable_progress_bar default_repo.session = pretend.stub( post=lambda url, data, allow_redirects, headers: response_with(status_code=200) ) fakefile = tmpdir.join("fake.whl") fakefile.write(".") def dictfunc(): return {"name": "fake"} package = pretend.stub( safe_name="fake", metadata=pretend.stub(version="2.12.0"), basefilename="fake.whl", filename=str(fakefile), metadata_dictionary=dictfunc, ) default_repo.upload(package) def test_upload_retry(tmpdir, default_repo, caplog): """Print retry messages when the upload response indicates a server error.""" default_repo.disable_progress_bar = True default_repo.session = pretend.stub( post=lambda url, data, allow_redirects, headers: response_with( status_code=500, reason="Internal server error" ) ) fakefile = tmpdir.join("fake.whl") fakefile.write(".") package = pretend.stub( safe_name="fake", metadata=pretend.stub(version="2.12.0"), basefilename="fake.whl", filename=str(fakefile), metadata_dictionary=lambda: {"name": "fake"}, ) # Upload with default max_redirects of 5 default_repo.upload(package) assert caplog.messages == [ ( 'Received "500: Internal server error"\n' f"Package upload appears to have failed. Retry {i} of 5." ) for i in range(1, 6) ] caplog.clear() # Upload with custom max_redirects of 3 default_repo.upload(package, 3) assert caplog.messages == [ ( 'Received "500: Internal server error"\n' f"Package upload appears to have failed. Retry {i} of 3." ) for i in range(1, 4) ] @pytest.mark.parametrize( "package_meta,repository_url,release_urls", [ # Single package ( [("fake", "2.12.0")], utils.DEFAULT_REPOSITORY, {"https://pypi.org/project/fake/2.12.0/"}, ), # Single package to testpypi ( [("fake", "2.12.0")], utils.TEST_REPOSITORY, {"https://test.pypi.org/project/fake/2.12.0/"}, ), # Multiple packages (faking a wheel and an sdist) ( [("fake", "2.12.0"), ("fake", "2.12.0")], utils.DEFAULT_REPOSITORY, {"https://pypi.org/project/fake/2.12.0/"}, ), # Multiple releases ( [("fake", "2.12.0"), ("fake", "2.12.1")], utils.DEFAULT_REPOSITORY, { "https://pypi.org/project/fake/2.12.0/", "https://pypi.org/project/fake/2.12.1/", }, ), # Not pypi ([("fake", "2.12.0")], "http://devpi.example.com", set()), # No packages ([], utils.DEFAULT_REPOSITORY, set()), ], ) def test_release_urls(package_meta, repository_url, release_urls): """Generate a set of PyPI release URLs for a list of packages.""" packages = [ pretend.stub(safe_name=name, version=version) for name, version in package_meta ] repo = repository.Repository( repository_url=repository_url, username="username", password="password", ) assert repo.release_urls(packages) == release_urls def test_package_is_uploaded_incorrect_repo_url(): """Return False when using an incorrect repository URL.""" repo = repository.Repository( repository_url="https://bad.repo.com/legacy", username="username", password="password", ) repo.url = "https://bad.repo.com/legacy" assert repo.package_is_uploaded(None) is False @pytest.mark.parametrize( "username, password, messages", [ (None, None, ["username: ", "password: "]), ("", "", ["username: ", "password: "]), ("username", "password", ["username: username", "password: "]), ], ) def test_logs_username_and_password(username, password, messages, caplog): caplog.set_level(logging.INFO, "twine") repository.Repository( repository_url=utils.DEFAULT_REPOSITORY, username=username, password=password, ) assert caplog.messages == messages ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_sdist.py0000644000175100017510000001123515231700043016210 0ustar00runnerrunnerimport os import pathlib import tarfile import pytest from twine import exceptions from twine import sdist from .helpers import TESTS_DIR from .helpers import build_archive @pytest.fixture( params=[ "fixtures/twine-1.5.0.tar.gz", "fixtures/twine-1.6.5.tar.gz", ] ) def example_sdist(request): file_name = os.path.join(TESTS_DIR, request.param) return sdist.SDist(file_name) @pytest.fixture(params=["tar.gz", "zip"]) def archive_format(request): return request.param def test_read_example(example_sdist): """Parse metadata from a valid sdist file.""" metadata = example_sdist.read() assert b"Metadata-Version: 1.1" in metadata assert b"Name: twine" in metadata assert b"Version: 1." in metadata def test_read_non_existent(): """Raise an exception when sdist file doesn't exist.""" file_name = str(pathlib.Path("/foo/bar/baz.tar.gz").resolve()) with pytest.raises(exceptions.InvalidDistribution, match="No such file"): sdist.SDist(file_name).read() def test_formar_not_supported(): """Raise an exception when sdist is not a .tar.gz or a .zip.""" file_name = str(pathlib.Path("/foo/bar/baz.foo").resolve()) with pytest.raises(exceptions.InvalidDistribution, match="Unsupported sdist"): sdist.SDist(file_name).read() def test_read(archive_format, tmp_path): """Read PKG-INFO from a valid sdist.""" filepath = build_archive( tmp_path, "test-1.2.3", archive_format, { "test-1.2.3/README": "README", "test-1.2.3/PKG-INFO": """ Metadata-Version: 1.1 Name: test Version: 1.2.3 """, }, ) metadata = sdist.SDist(str(filepath)).read() assert b"Metadata-Version: 1.1" in metadata assert b"Name: test" in metadata assert b"Version: 1.2.3" in metadata def test_missing_pkg_info(archive_format, tmp_path): """Raise an exception when sdist does not contain PKG-INFO.""" filepath = build_archive( tmp_path, "test-1.2.3", archive_format, { "test-1.2.3/README": "README", }, ) with pytest.raises(exceptions.InvalidDistribution, match="No PKG-INFO in archive"): sdist.SDist(str(filepath)).read() def test_invalid_pkg_info(archive_format, tmp_path): """Raise an exception when PKG-INFO does not contain ``Metadata-Version``.""" filepath = build_archive( tmp_path, "test-1.2.3", archive_format, { "test-1.2.3/README": "README", "test-1.2.3/PKG-INFO": """ Name: test Version: 1.2.3. """, }, ) with pytest.raises(exceptions.InvalidDistribution, match="No PKG-INFO in archive"): sdist.SDist(str(filepath)).read() def test_pkg_info_directory(archive_format, tmp_path): """Raise an exception when PKG-INFO is a directory.""" filepath = build_archive( tmp_path, "test-1.2.3", archive_format, { "test-1.2.3/README": "README", "test-1.2.3/PKG-INFO/content": """ Metadata-Version: 1.1 Name: test Version: 1.2.3. """, }, ) with pytest.raises(exceptions.InvalidDistribution, match="No PKG-INFO in archive"): sdist.SDist(str(filepath)).read() def test_pkg_info_not_regular_file(tmp_path): """Raise an exception when PKG-INFO is a directory.""" link = tarfile.TarInfo() link.type = tarfile.LNKTYPE link.linkname = "README" filepath = build_archive( tmp_path, "test-1.2.3", "tar.gz", { "test-1.2.3/README": "README", "test-1.2.3/PKG-INFO": link, }, ) with pytest.raises( exceptions.InvalidDistribution, match=r"^PKG-INFO is not a reg.*test-1.2.3.tar.gz$", ): sdist.SDist(str(filepath)).read() def test_multiple_top_level(archive_format, tmp_path): """Raise an exception when there are too many top-level members.""" filepath = build_archive( tmp_path, "test-1.2.3", archive_format, { "test-1.2.3/README": "README", "test-1.2.3/PKG-INFO": """ Metadata-Version: 1.1 Name: test Version: 1.2.3. """, "test-2.0.0/README": "README", }, ) with pytest.raises( exceptions.InvalidDistribution, match=r"^Too many top-level.*test-1.2.3.(tar.gz|zip)$", ): sdist.SDist(str(filepath)).read() def test_py_version(example_sdist): assert example_sdist.py_version == "source" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_settings.py0000644000175100017510000001536115231700043016726 0ustar00runnerrunner"""Tests for the Settings class and module.""" # Copyright 2018 Ian Stapleton Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import logging import pytest from twine import exceptions from twine import repository from twine import settings def test_settings_takes_no_positional_arguments(): """Raise an exception when Settings is initialized without keyword arguments.""" with pytest.raises(TypeError): settings.Settings("a", "b", "c") def test_settings_transforms_repository_config_pypi(write_config_file): """Set repository config and defaults when .pypirc is provided. Ignores the username setting due to PyPI being the index. """ config_file = write_config_file(""" [pypi] repository: https://upload.pypi.org/legacy/ username:this-is-ignored password:password """) s = settings.Settings(config_file=config_file) assert s.repository_config["repository"] == "https://upload.pypi.org/legacy/" assert s.sign is False assert s.sign_with == "gpg" assert s.identity is None assert s.username == "__token__" assert s.password == "password" assert s.cacert is None assert s.client_cert is None assert s.disable_progress_bar is False def test_settings_transforms_repository_config_non_pypi(write_config_file): """Set repository config and defaults when .pypirc is provided.""" config_file = write_config_file(""" [distutils] index-servers = notpypi [notpypi] repository: https://upload.example.org/legacy/ username:someusername password:password """) s = settings.Settings(config_file=config_file, repository_name="notpypi") assert s.repository_config["repository"] == "https://upload.example.org/legacy/" assert s.sign is False assert s.sign_with == "gpg" assert s.identity is None assert s.username == "someusername" assert s.password == "password" assert s.client_cert is None assert s.disable_progress_bar is False def test_settings_verify_feature_compatibility() -> None: s = settings.Settings(skip_existing=True) s.repository_config = {"repository": repository.WAREHOUSE} try: s.verify_feature_capability() except exceptions.UnsupportedConfiguration as unexpected_exc: pytest.fail( "Expected feature capability to work with production PyPI" f" but got {unexpected_exc!r}" ) s.repository_config["repository"] = repository.TEST_WAREHOUSE try: s.verify_feature_capability() except exceptions.UnsupportedConfiguration as unexpected_exc: pytest.fail( "Expected feature capability to work with TestPyPI but got" f" {unexpected_exc!r}" ) s.repository_config["repository"] = "https://not-really-pypi.example.com/legacy" with pytest.raises(exceptions.UnsupportedConfiguration): s.verify_feature_capability() s.skip_existing = False try: s.verify_feature_capability() except exceptions.UnsupportedConfiguration as unexpected_exc: pytest.fail( "Expected an exception only when --skip-existing is provided" f" but got {unexpected_exc!r}" ) @pytest.mark.parametrize( "verbose, log_level", [(True, logging.INFO), (False, logging.WARNING)] ) def test_setup_logging(verbose, log_level): """Set log level based on verbose field.""" settings.Settings(verbose=verbose) logger = logging.getLogger("twine") assert logger.level == log_level @pytest.mark.parametrize( "verbose", [True, False], ) def test_print_config_path_if_verbose(config_file, caplog, make_settings, verbose): """Print the location of the .pypirc config used by the user.""" make_settings(verbose=verbose) if verbose: assert caplog.messages == [f"Using configuration from {config_file}"] else: assert caplog.messages == [] def test_identity_requires_sign(): """Raise an exception when user provides identity but doesn't require signing.""" with pytest.raises(exceptions.InvalidSigningConfiguration): settings.Settings(sign=False, identity="fakeid") @pytest.mark.parametrize("client_cert", [None, ""]) def test_password_is_required_if_no_client_cert(client_cert, entered_password): """Set password when client_cert is not provided.""" settings_obj = settings.Settings(username="fakeuser", client_cert=client_cert) assert settings_obj.password == "entered pw" def test_client_cert_and_password_both_set_if_given(): """Set password and client_cert when both are provided.""" client_cert = "/random/path" settings_obj = settings.Settings( username="fakeuser", password="anything", client_cert=client_cert ) assert settings_obj.password == "anything" assert settings_obj.client_cert == client_cert def test_password_required_if_no_client_cert_and_non_interactive(): """Raise exception if no password or client_cert when non interactive.""" settings_obj = settings.Settings(username="fakeuser", non_interactive=True) with pytest.raises(exceptions.NonInteractive): settings_obj.password def test_no_password_prompt_if_client_cert_and_non_interactive(entered_password): """Don't prompt for password when client_cert is provided and non interactive.""" client_cert = "/random/path" settings_obj = settings.Settings( username="fakeuser", client_cert=client_cert, non_interactive=True ) assert not settings_obj.password class TestArgumentParsing: @staticmethod def parse_args(args): parser = argparse.ArgumentParser() settings.Settings.register_argparse_arguments(parser) return parser.parse_args(args) def test_non_interactive_flag(self): args = self.parse_args(["--non-interactive"]) assert args.non_interactive def test_non_interactive_environment(self, monkeypatch): monkeypatch.setenv("TWINE_NON_INTERACTIVE", "1") args = self.parse_args([]) assert args.non_interactive monkeypatch.setenv("TWINE_NON_INTERACTIVE", "0") args = self.parse_args([]) assert not args.non_interactive def test_attestations_flag(self): args = self.parse_args(["--attestations"]) assert args.attestations ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_upload.py0000644000175100017510000004403515231700043016352 0ustar00runnerrunner# Copyright 2014 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import os import pretend import pytest import requests from twine import cli from twine import exceptions from twine import package as package_file from twine.commands import upload from . import helpers RELEASE_URL = "https://pypi.org/project/twine/4.0.2/" NEW_RELEASE_URL = "https://pypi.org/project/twine/6.2.0/" @pytest.fixture def stub_response(): """Mock successful upload of a package.""" return pretend.stub( is_redirect=False, url="https://test.pypi.org/legacy/", status_code=200, reason="OK", text=None, raise_for_status=lambda: None, ) @pytest.fixture def stub_repository(stub_response): """Allow assertions on the uploaded package.""" return pretend.stub( upload=pretend.call_recorder(lambda package: stub_response), close=lambda: None, release_urls=lambda packages: set(), ) @pytest.fixture def upload_settings(make_settings, stub_repository): """Use the stub repository when uploading.""" upload_settings = make_settings() upload_settings.create_repository = lambda: stub_repository return upload_settings def test_make_package_pre_signed_dist(upload_settings, caplog): """Create a PackageFile and print path, size, and user-provided signature.""" filename = helpers.WHEEL_FIXTURE expected_size = "35.5 KB" signed_filename = helpers.WHEEL_FIXTURE + ".asc" signatures = {os.path.basename(signed_filename): signed_filename} upload_settings.sign = True upload_settings.verbose = True package = upload._make_package(filename, signatures, [], upload_settings) assert package.filename == filename assert package.gpg_signature is not None assert package.attestations is None assert caplog.messages == [ f"{filename} ({expected_size})", f"Signed with {signed_filename}", ] def test_make_package_unsigned_dist(upload_settings, monkeypatch, caplog): """Create a PackageFile and print path, size, and Twine-generated signature.""" filename = helpers.NEW_WHEEL_FIXTURE expected_size = "41.7 KB" signatures = {} upload_settings.sign = True upload_settings.verbose = True def stub_sign(package, *_): package.gpg_signature = (package.signed_basefilename, b"signature") monkeypatch.setattr(package_file.PackageFile, "sign", stub_sign) package = upload._make_package(filename, signatures, [], upload_settings) assert package.filename == filename assert package.gpg_signature is not None assert caplog.messages == [ f"{filename} ({expected_size})", f"Signed with {package.signed_filename}", ] def test_make_package_attestations_flagged_but_missing(upload_settings): """Fail when the user requests attestations but does not supply any attestations.""" upload_settings.attestations = True with pytest.raises( exceptions.InvalidDistribution, match="Upload with attestations requested" ): upload._make_package(helpers.NEW_WHEEL_FIXTURE, {}, [], upload_settings) def test_success_prints_release_urls(upload_settings, stub_repository, capsys): """Print PyPI release URLS for each uploaded package.""" stub_repository.release_urls = lambda packages: {RELEASE_URL, NEW_RELEASE_URL} result = upload.upload( upload_settings, [ helpers.WHEEL_FIXTURE, helpers.SDIST_FIXTURE, helpers.NEW_SDIST_FIXTURE, helpers.NEW_WHEEL_FIXTURE, ], ) assert result is None captured = capsys.readouterr() assert captured.out.count(RELEASE_URL) == 1 assert captured.out.count(NEW_RELEASE_URL) == 1 def test_print_packages_if_verbose(upload_settings, caplog): """Print the path and file size of each distribution attempting to be uploaded.""" dists_to_upload = { helpers.WHEEL_FIXTURE: "35.5 KB", helpers.NEW_WHEEL_FIXTURE: "41.7 KB", helpers.SDIST_FIXTURE: "20.8 KB", helpers.NEW_SDIST_FIXTURE: "26.1 KB", } upload_settings.verbose = True result = upload.upload(upload_settings, dists_to_upload.keys()) assert result is None assert [m for m in caplog.messages if m.endswith("KB)")] == [ f"{filename} ({size})" for filename, size in dists_to_upload.items() ] def test_print_response_if_verbose(upload_settings, stub_response, caplog): """Print details about the response from the repository.""" upload_settings.verbose = True result = upload.upload( upload_settings, [helpers.WHEEL_FIXTURE, helpers.SDIST_FIXTURE], ) assert result is None response_log = ( f"Response from {stub_response.url}:\n" f"{stub_response.status_code} {stub_response.reason}" ) assert caplog.messages.count(response_log) == 2 def test_success_with_pre_signed_distribution(upload_settings, stub_repository, caplog): """Add GPG signature provided by user to uploaded package.""" # Upload a pre-signed distribution result = upload.upload( upload_settings, [helpers.WHEEL_FIXTURE, helpers.WHEEL_FIXTURE + ".asc"] ) assert result is None # The signature should be added via package.add_gpg_signature() package = stub_repository.upload.calls[0].args[0] assert package.gpg_signature == ( "twine-4.0.2-py3-none-any.whl.asc", b"signature", ) # Ensure that a warning is emitted. assert ( "One or more packages has an associated PGP signature; these will " "be silently ignored by the index" in caplog.messages ) def test_warns_potential_pgp_removal_on_3p_index( make_settings, stub_repository, caplog ): """Warn when a PGP signature is specified for upload to a third-party index.""" upload_settings = make_settings(""" [pypi] repository: https://example.com/not-a-real-index/ username:foo password:bar """) upload_settings.create_repository = lambda: stub_repository # Upload a pre-signed distribution result = upload.upload( upload_settings, [helpers.WHEEL_FIXTURE, helpers.WHEEL_FIXTURE + ".asc"] ) assert result is None # The signature should be added via package.add_gpg_signature() package = stub_repository.upload.calls[0].args[0] assert package.gpg_signature == ( "twine-4.0.2-py3-none-any.whl.asc", b"signature", ) # Ensure that a warning is emitted. assert ( "One or more packages has an associated PGP signature; a future " "version of twine may silently ignore these. See " "https://github.com/pypa/twine/issues/1009 for more information" in caplog.messages ) def test_exception_with_only_pre_signed_file(upload_settings, stub_repository): """Raise an exception when only a signed file is uploaded.""" # Upload only pre-signed file with pytest.raises(exceptions.InvalidDistribution) as err: upload.upload(upload_settings, [helpers.WHEEL_FIXTURE + ".asc"]) assert ( "Cannot upload signed files by themselves, must upload with a " "corresponding distribution file." in err.value.args[0] ) def test_success_when_gpg_is_run(upload_settings, stub_repository, monkeypatch): """Add GPG signature generated by gpg command to uploaded package.""" # Indicate that upload() should run_gpg() to generate the signature, which # we'll stub out to use WHEEL_FIXTURE + ".asc" upload_settings.sign = True upload_settings.sign_with = "gpg" monkeypatch.setattr( package_file.PackageFile, "run_gpg", pretend.call_recorder(lambda cls, gpg_args: None), ) # Upload an unsigned distribution result = upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) assert result is None # The signature should be added via package.sign() package = stub_repository.upload.calls[0].args[0] assert len(package.run_gpg.calls) == 1 assert helpers.WHEEL_FIXTURE in package.run_gpg.calls[0].args[1] assert package.gpg_signature == ( "twine-4.0.2-py3-none-any.whl.asc", b"signature", ) @pytest.mark.parametrize("verbose", [False, True]) def test_exception_for_http_status( verbose, upload_settings, stub_response, capsys, caplog ): upload_settings.verbose = verbose stub_response.is_redirect = False stub_response.status_code = 403 stub_response.reason = "Invalid or non-existent authentication information" stub_response.text = stub_response.reason stub_response.raise_for_status = pretend.raiser(requests.HTTPError) with pytest.raises(requests.HTTPError): upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) captured = capsys.readouterr() assert RELEASE_URL not in captured.out if verbose: assert caplog.messages == [ f"{helpers.WHEEL_FIXTURE} (35.5 KB)", f"Response from {stub_response.url}:\n403 {stub_response.reason}", stub_response.text, ] else: assert caplog.messages == [ "Error during upload. Retry with the --verbose option for more details." ] def test_get_config_old_format(make_settings, config_file): try: make_settings(""" [server-login] username:foo password:bar """) except KeyError as err: assert all( text in err.args[0] for text in [ "'pypi'", "--repository-url", config_file, "https://docs.python.org/", ] ) def test_deprecated_repo(make_settings): with pytest.raises(exceptions.UploadToDeprecatedPyPIDetected) as err: upload_settings = make_settings(""" [pypi] repository: https://pypi.python.org/pypi/ username:foo password:bar """) upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) assert all( text in err.value.args[0] for text in [ "https://pypi.python.org/pypi/", "https://upload.pypi.org/legacy/", "https://test.pypi.org/legacy/", "https://packaging.python.org/", ] ) @pytest.mark.parametrize( "repository_url, redirect_url, message_match", [ ( "https://test.pypi.org/legacy", "https://test.pypi.org/legacy/", ( r"https://test.pypi.org/legacy.+https://test.pypi.org/legacy/" r".+\nYour repository URL is missing a trailing slash" ), ), ( "https://test.pypi.org/legacy/", "https://malicious.website.org/danger/", ( r"https://test.pypi.org/legacy/.+https://malicious.website.org/danger/" r".+\nIf you trust these URLs" ), ), ], ) def test_exception_for_redirect( repository_url, redirect_url, message_match, make_settings, ): # Not using fixtures because this setup is significantly different upload_settings = make_settings(f""" [pypi] repository: {repository_url} username:foo password:bar """) stub_response = pretend.stub( is_redirect=True, url=redirect_url, status_code=301, headers={"location": redirect_url}, reason="Redirect", text="", ) stub_repository = pretend.stub( upload=lambda package: stub_response, close=lambda: None ) upload_settings.create_repository = lambda: stub_repository with pytest.raises(exceptions.RedirectDetected, match=message_match): upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) def test_prints_skip_message_for_uploaded_package( upload_settings, stub_repository, capsys, caplog ): upload_settings.skip_existing = True # Short-circuit the upload stub_repository.package_is_uploaded = lambda package: True result = upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) assert result is None captured = capsys.readouterr() assert RELEASE_URL not in captured.out assert caplog.messages == [ "Skipping twine-4.0.2-py3-none-any.whl because it appears to already exist" ] def test_prints_skip_message_for_response( upload_settings, stub_response, stub_repository, capsys, caplog ): upload_settings.skip_existing = True stub_response.status_code = 400 stub_response.reason = "File already exists" stub_response.text = stub_response.reason # Do the upload, triggering the error response stub_repository.package_is_uploaded = lambda package: False result = upload.upload(upload_settings, [helpers.WHEEL_FIXTURE]) assert result is None captured = capsys.readouterr() assert RELEASE_URL not in captured.out assert caplog.messages == [ "Skipping twine-4.0.2-py3-none-any.whl because it appears to already exist" ] @pytest.mark.parametrize( "response_kwargs", [ pytest.param( dict( status_code=400, reason=( 'A file named "twine-4.0.2-py3-none-any.whl" already ' "exists for twine-4.0.2." ), ), id="pypi", ), pytest.param( dict( status_code=409, reason=( 'A file named "twine-4.0.2-py3-none-any.whl" already ' "exists for twine-4.0.2." ), ), id="pypiserver", ), ], ) def test_skip_existing_skips_files_on_repository(response_kwargs): assert upload.skip_upload( response=pretend.stub(**response_kwargs), skip_existing=True, package=package_file.PackageFile.from_filename(helpers.WHEEL_FIXTURE, None), ) @pytest.mark.parametrize( "response_kwargs", [ pytest.param( dict(status_code=400, reason="Invalid credentials"), id="wrong_reason" ), pytest.param(dict(status_code=404), id="wrong_code"), ], ) def test_skip_upload_doesnt_match(response_kwargs): assert not upload.skip_upload( response=pretend.stub(**response_kwargs), skip_existing=True, package=package_file.PackageFile.from_filename(helpers.WHEEL_FIXTURE, None), ) def test_skip_upload_respects_skip_existing(): assert not upload.skip_upload( response=pretend.stub(), skip_existing=False, package=package_file.PackageFile.from_filename(helpers.WHEEL_FIXTURE, None), ) @pytest.mark.parametrize("repo", ["pypi", "testpypi"]) def test_values_from_env_pypi(monkeypatch, repo): def none_upload(*args, **settings_kwargs): pass replaced_upload = pretend.call_recorder(none_upload) monkeypatch.setattr(upload, "upload", replaced_upload) testenv = { "TWINE_REPOSITORY": repo, "TWINE_USERNAME": "pypiuser", "TWINE_PASSWORD": "pypipassword", "TWINE_CERT": "/foo/bar.crt", } for key, value in testenv.items(): monkeypatch.setenv(key, value) cli.dispatch(["upload", "path/to/file"]) upload_settings = replaced_upload.calls[0].args[0] assert "pypipassword" == upload_settings.password assert "pypiuser" == upload_settings.username assert "/foo/bar.crt" == upload_settings.cacert def test_values_from_env_non_pypi(monkeypatch, write_config_file): write_config_file(""" [distutils] index-servers = notpypi [notpypi] repository: https://upload.example.org/legacy/ username:someusername password:password """) def none_upload(*args, **settings_kwargs): pass replaced_upload = pretend.call_recorder(none_upload) monkeypatch.setattr(upload, "upload", replaced_upload) testenv = { "TWINE_REPOSITORY": "notpypi", "TWINE_USERNAME": "someusername", "TWINE_PASSWORD": "pypipassword", "TWINE_CERT": "/foo/bar.crt", } for key, value in testenv.items(): monkeypatch.setenv(key, value) cli.dispatch(["upload", "path/to/file"]) upload_settings = replaced_upload.calls[0].args[0] assert "pypipassword" == upload_settings.password assert "someusername" == upload_settings.username assert "/foo/bar.crt" == upload_settings.cacert @pytest.mark.parametrize( "repo_url", ["https://upload.pypi.org/", "https://test.pypi.org/", "https://pypi.org/"], ) def test_check_status_code_for_wrong_repo_url(repo_url, upload_settings, stub_response): upload_settings.repository_config["repository"] = repo_url stub_response.url = repo_url stub_response.status_code = 405 with pytest.raises(exceptions.InvalidPyPIUploadURL): upload.upload( upload_settings, [ helpers.WHEEL_FIXTURE, helpers.SDIST_FIXTURE, helpers.NEW_SDIST_FIXTURE, helpers.NEW_WHEEL_FIXTURE, ], ) def test_upload_warns_attestations_non_pypi(upload_settings, caplog, stub_response): upload_settings.repository_config["repository"] = "https://notpypi.example.com" upload_settings.attestations = True # This fails because the attestation isn't a real file, which is fine # since our functionality under test happens before the failure. with pytest.raises(exceptions.InvalidDistribution): upload.upload( upload_settings, [helpers.WHEEL_FIXTURE, helpers.WHEEL_FIXTURE + ".foo.attestation"], ) assert ( "Only PyPI and TestPyPI support attestations; if you experience " "failures, remove the --attestations flag and re-try this command" in caplog.messages ) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_utils.py0000644000175100017510000002507215231700043016226 0ustar00runnerrunner# Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import os.path import pretend import pytest import requests from twine import exceptions from twine import utils def test_get_config(write_config_file): config_file = write_config_file(""" [distutils] index-servers = pypi [pypi] username = testuser password = testpassword """) assert utils.get_config(config_file) == { "pypi": { "repository": utils.DEFAULT_REPOSITORY, "username": "testuser", "password": "testpassword", }, } def test_get_config_no_distutils(write_config_file): """Upload by default to PyPI if an index server is not set in .pypirc.""" config_file = write_config_file(""" [pypi] username = testuser password = testpassword """) assert utils.get_config(config_file) == { "pypi": { "repository": utils.DEFAULT_REPOSITORY, "username": "testuser", "password": "testpassword", }, "testpypi": { "repository": utils.TEST_REPOSITORY, "username": None, "password": None, }, } def test_get_config_no_section(write_config_file): config_file = write_config_file(""" [distutils] index-servers = pypi foo [pypi] username = testuser password = testpassword """) assert utils.get_config(config_file) == { "pypi": { "repository": utils.DEFAULT_REPOSITORY, "username": "testuser", "password": "testpassword", }, } def test_get_config_override_pypi_url(write_config_file): config_file = write_config_file(""" [pypi] repository = http://pypiproxy """) assert utils.get_config(config_file)["pypi"]["repository"] == "http://pypiproxy" def test_get_config_missing(config_file): assert utils.get_config(config_file) == { "pypi": { "repository": utils.DEFAULT_REPOSITORY, "username": None, "password": None, }, "testpypi": { "repository": utils.TEST_REPOSITORY, "username": None, "password": None, }, } def test_empty_userpass(write_config_file): """Suppress prompts if empty username and password are provided in .pypirc.""" config_file = write_config_file(""" [pypi] username= password= """) config = utils.get_config(config_file) pypi = config["pypi"] assert pypi["username"] == pypi["password"] == "" def test_get_repository_config_missing(config_file): repository_url = "https://notexisting.python.org/pypi" exp = { "repository": repository_url, "username": None, "password": None, } assert utils.get_repository_from_config(config_file, "foo", repository_url) == exp assert utils.get_repository_from_config(config_file, "pypi", repository_url) == exp exp = { "repository": utils.DEFAULT_REPOSITORY, "username": None, "password": None, } assert utils.get_repository_from_config(config_file, "pypi") == exp @pytest.mark.parametrize( "repository_url, expected_config", [ ( "https://user:pass@notexisting.python.org/pypi", { "repository": "https://notexisting.python.org/pypi", "username": "user", "password": "pass", }, ), ( "https://auser:pass@pypi.proxy.local.repo.net:8443", { "repository": "https://pypi.proxy.local.repo.net:8443", "username": "auser", "password": "pass", }, ), ], ) def test_get_repository_config_url_with_auth( config_file, repository_url, expected_config ): assert ( utils.get_repository_from_config(config_file, "foo", repository_url) == expected_config ) assert ( utils.get_repository_from_config(config_file, "pypi", repository_url) == expected_config ) @pytest.mark.parametrize( "input_url, expected_url", [ ("https://upload.pypi.org/legacy/", "https://upload.pypi.org/legacy/"), ( "https://user:pass@upload.pypi.org/legacy/", "https://********@upload.pypi.org/legacy/", ), ], ) def test_sanitize_url(input_url: str, expected_url: str) -> None: assert utils.sanitize_url(input_url) == expected_url @pytest.mark.parametrize( "repo_url, message", [ ( "ftp://test.pypi.org", r"scheme was required to be one of \['http', 'https'\]", ), ("https:/", "host was required but missing."), ("//test.pypi.org", "scheme was required but missing."), ("foo.bar", "host, scheme were required but missing."), ], ) def test_get_repository_config_with_invalid_url(config_file, repo_url, message): """Raise an exception for a URL with an invalid/missing scheme and/or host.""" with pytest.raises( exceptions.UnreachableRepositoryURLDetected, match=message, ): utils.get_repository_from_config(config_file, "pypi", repo_url) def test_get_repository_config_missing_repository(write_config_file): """Raise an exception when a custom repository isn't defined in .pypirc.""" config_file = write_config_file("") with pytest.raises( exceptions.InvalidConfiguration, match="Missing 'missing-repository'", ): utils.get_repository_from_config(config_file, "missing-repository") @pytest.mark.parametrize( "invalid_config", [ # No surrounding [server] section """ username = testuser password = testpassword """, # Valid section but bare API token """ [pypi] pypi-lolololol """, # No section, bare API token """ pypi-lolololol """, ], ) def test_get_repository_config_invalid_syntax(write_config_file, invalid_config): """Raise an exception when the .pypirc has invalid syntax.""" config_file = write_config_file(invalid_config) with pytest.raises( exceptions.InvalidConfiguration, match="Malformed configuration", ): utils.get_repository_from_config(config_file, "pypi") @pytest.mark.parametrize("repository", ["pypi", "missing-repository"]) def test_get_repository_config_missing_file(repository): """Raise an exception when a custom config file doesn't exist.""" with pytest.raises( exceptions.InvalidConfiguration, match=r"No such file.*missing-file", ): utils.get_repository_from_config("missing-file", repository) def test_get_config_deprecated_pypirc(): tests_dir = os.path.dirname(os.path.abspath(__file__)) deprecated_pypirc_path = os.path.join(tests_dir, "fixtures", "deprecated-pypirc") assert utils.get_config(deprecated_pypirc_path) == { "pypi": { "repository": utils.DEFAULT_REPOSITORY, "username": "testusername", "password": "testpassword", }, "testpypi": { "repository": utils.TEST_REPOSITORY, "username": "testusername", "password": "testpassword", }, } @pytest.mark.parametrize( ("cli_value", "config", "key", "strategy", "expected"), ( ("cli", {}, "key", lambda: "fallback", "cli"), (None, {"key": "value"}, "key", lambda: "fallback", "value"), (None, {}, "key", lambda: "fallback", "fallback"), ), ) def test_get_userpass_value(cli_value, config, key, strategy, expected): ret = utils.get_userpass_value(cli_value, config, key, strategy) assert ret == expected @pytest.mark.parametrize( ("env_name", "default", "environ", "expected"), [ ("MY_PASSWORD", None, {}, None), ("MY_PASSWORD", None, {"MY_PASSWORD": "foo"}, "foo"), ("URL", "https://example.org", {}, "https://example.org"), ("URL", "https://example.org", {"URL": "https://pypi.org"}, "https://pypi.org"), ], ) def test_default_to_environment_action( monkeypatch, env_name, default, environ, expected ): option_strings = ("-x", "--example") dest = "example" for key, value in environ.items(): monkeypatch.setenv(key, value) action = utils.EnvironmentDefault( env=env_name, default=default, option_strings=option_strings, dest=dest, ) assert action.env == env_name assert action.default == expected @pytest.mark.parametrize( "repo_url", ["https://pypi.python.org", "https://testpypi.python.org"] ) def test_check_status_code_for_deprecated_pypi_url(repo_url): response = pretend.stub(status_code=410, url=repo_url) # value of Verbose doesn't matter for this check with pytest.raises(exceptions.UploadToDeprecatedPyPIDetected): utils.check_status_code(response, False) @pytest.mark.parametrize( "repo_url", ["https://pypi.python.org", "https://testpypi.python.org"], ) @pytest.mark.parametrize( "verbose", [True, False], ) def test_check_status_code_for_missing_status_code( caplog, repo_url, verbose, make_settings, config_file ): """Print HTTP errors based on verbosity level.""" response = pretend.stub( status_code=403, url=repo_url, raise_for_status=pretend.raiser(requests.HTTPError), text="Forbidden", ) make_settings(verbose=verbose) with pytest.raises(requests.HTTPError): utils.check_status_code(response, verbose) message = ( "Error during upload. Retry with the --verbose option for more details." ) assert caplog.messages.count(message) == 0 if verbose else 1 @pytest.mark.parametrize( ("size_in_bytes, formatted_size"), [(3704, "3.6 KB"), (1153433, "1.1 MB"), (21412841, "20.4 MB")], ) def test_get_file_size(size_in_bytes, formatted_size, monkeypatch): """Get the size of file as a string with units.""" monkeypatch.setattr(os.path, "getsize", lambda _: size_in_bytes) file_size = utils.get_file_size(size_in_bytes) assert file_size == formatted_size ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tests/test_wheel.py0000644000175100017510000000574415231700043016176 0ustar00runnerrunner# Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import pathlib import re import zipfile import pretend import pytest from twine import exceptions from twine import wheel @pytest.fixture() def example_wheel(request): parent = pathlib.Path(__file__).parent file_name = str(parent / "fixtures" / "twine-4.0.2-py3-none-any.whl") return wheel.Wheel(file_name) def test_version_parsing(example_wheel): assert example_wheel.py_version == "py3" def test_version_parsing_missing_pyver(monkeypatch, example_wheel): wheel.wheel_file_re = pretend.stub(match=lambda a: None) assert example_wheel.py_version == "any" def test_find_metadata_files(): names = [ "package/lib/__init__.py", "package/lib/version.py", "package/METADATA.txt", "package/METADATA.json", "package/METADATA", ] expected = [ ["package", "METADATA"], ["package", "METADATA.json"], ["package", "METADATA.txt"], ] candidates = wheel.Wheel.find_candidate_metadata_files(names) assert expected == candidates def test_read_valid(example_wheel): """Parse metadata from a valid wheel file.""" metadata = example_wheel.read().decode().splitlines() assert "Name: twine" in metadata assert "Version: 4.0.2" in metadata def test_read_non_existent_wheel_file_name(): """Raise an exception when wheel file doesn't exist.""" file_name = str(pathlib.Path("/foo/bar/baz.whl").resolve()) with pytest.raises( exceptions.InvalidDistribution, match=re.escape(f"No such file: {file_name}") ): wheel.Wheel(file_name).read() def test_read_invalid_wheel_extension(): """Raise an exception when file is missing .whl extension.""" file_name = str(pathlib.Path(__file__).parent / "fixtures" / "twine-1.5.0.tar.gz") with pytest.raises( exceptions.InvalidDistribution, match=re.escape(f"Not a known archive format for file: {file_name}"), ): wheel.Wheel(file_name).read() def test_read_wheel_empty_metadata(tmpdir): """Raise an exception when a wheel file is missing METADATA.""" whl_file = tmpdir.mkdir("wheel").join("not-a-wheel.whl") with zipfile.ZipFile(whl_file, "w") as zip_file: zip_file.writestr("METADATA", "") with pytest.raises( exceptions.InvalidDistribution, match=re.escape( f"No METADATA in archive or METADATA missing 'Metadata-Version': {whl_file}" ), ): wheel.Wheel(whl_file).read() ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/tox.ini0000644000175100017510000000644315231700043013627 0ustar00runnerrunner[tox] minversion = 3.10 envlist = lint,types,py{310,311,312,313,314},integration,docs isolated_build = True [testenv] deps = pretend pytest pytest-socket coverage passenv = PYTEST_ADDOPTS setenv = HOME=/tmp/nonexistent COVERAGE_FILE={env_tmp_dir}/.coverage commands = python -m coverage run -m pytest {posargs} python -m coverage html python -m coverage report --skip-covered --show-missing --fail-under 97 [testenv:integration] deps = {[testenv]deps} pytest-rerunfailures pytest-services devpi-server devpi pypiserver passenv = PYTEST_ADDOPTS commands = pytest -r aR tests/test_integration.py {posargs} [testenv:docs] deps = -rdocs/requirements.txt allowlist_externals = sh commands = sphinx-build -W --keep-going -b html -d {envtmpdir}/doctrees docs docs/_build/html sphinx-build -W --keep-going -b doctest -d {envtmpdir}/doctrees docs docs/_build/html doc8 docs README.rst --ignore-path docs/_build/html sphinx-build -W --keep-going -b linkcheck -d {envtmpdir}/doctrees docs docs/_build/linkcheck sh -c "python -m twine check --strict $TOX_PACKAGE" [testenv:watch-docs] deps = -rdocs/requirements.txt sphinx-autobuild commands = sphinx-autobuild -b html -d {envtmpdir}/doctrees \ --watch twine \ {posargs:--host 127.0.0.1} \ docs docs/_build/html [testenv:format] skip_install = True deps = isort black commands = isort twine/ tests/ black twine/ tests/ [testenv:lint] skip_install = True deps = {[testenv:format]deps} flake8 flake8-docstrings commands = isort --check-only --diff twine/ tests/ black --check --diff twine/ tests/ flake8 twine/ tests/ [testenv:types] deps = mypy # required for report generation. 5.2.1 is forbidden due to an observed # broken wheel on CPython 3.8: # https://bugs.launchpad.net/lxml/+bug/2064158 lxml >= 5.2.0, != 5.2.1 # required for more thorough type declarations keyring >= 22.3 # consider replacing with `mypy --install-types` when # https://github.com/python/mypy/issues/10600 is resolved types-requests commands = pip list mypy --html-report mypy --txt-report mypy {posargs:twine} python -c 'with open("mypy/index.txt") as f: print(f.read())' [testenv:changelog] basepython = python3 deps = towncrier commands = towncrier build {posargs} # Usage: # tox -e create-changelog-item -- [additional arguments] {filename}.{bugfix,feature,doc,removal,misc} [testenv:create-changelog-item] basepython = python3 skip_install = True deps = towncrier commands = towncrier create --config pyproject.toml {posargs} [testenv:release] # specify Python 3 to use platform's default Python 3 basepython = python3 deps = build passenv = TWINE_PASSWORD TWINE_REPOSITORY setenv = TWINE_USERNAME = {env:TWINE_USERNAME:__token__} commands = python -c "import shutil; shutil.rmtree('dist', ignore_errors=True)" python -m build python -m twine upload dist/* [testenv:dev] envdir = {posargs:venv} recreate = True deps = {[testenv]deps} {[testenv:integration]deps} {[testenv:format]deps} {[testenv:lint]deps} {[testenv:types]deps} download = True usedevelop = True commands = python -c 'import sys; print(sys.executable)' python --version ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.5014184 twine-7.0.0/twine/0000755000175100017510000000000015231700051013432 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/__init__.py0000644000175100017510000000275415231700043015554 0ustar00runnerrunner"""Top-level module for Twine. The contents of this package are not a public API. For more details, see https://github.com/pypa/twine/issues/194 and https://github.com/pypa/twine/issues/665. """ # Copyright 2018 Donald Stufft and individual contributors # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. __all__ = ( "__title__", "__summary__", "__uri__", "__version__", "__author__", "__email__", "__license__", "__copyright__", ) __copyright__ = "Copyright 2019 Donald Stufft and individual contributors" import email.utils import importlib.metadata as importlib_metadata metadata = importlib_metadata.metadata("twine") assert metadata is not None # nosec: B101 __title__ = metadata["name"] __summary__ = metadata["summary"] __uri__ = next( entry.split(", ")[1] for entry in metadata.get_all("Project-URL", ()) if entry.startswith("Homepage") ) __version__ = metadata["version"] __author__, __email__ = email.utils.parseaddr(metadata["author-email"]) __license__ = None ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/__main__.py0000644000175100017510000000423415231700043015530 0ustar00runnerrunner#!/usr/bin/env python3 # Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import http import logging import sys from typing import Any, cast import requests from twine import cli from twine import exceptions logger = logging.getLogger(__name__) def main() -> Any: # Ensure that all errors are logged, even before argparse cli.configure_output() try: error = cli.dispatch(sys.argv[1:]) except requests.HTTPError as exc: # Assuming this response will never be None response = cast(requests.Response, exc.response) error = True status_code = response.status_code try: status_phrase = http.HTTPStatus(status_code).phrase except ValueError: # HTTPStatus will raise ValueError if the server responds with # a non-standard status code. This is almost certainly an upstream # index error since non-standard status codes should only be used # for internal signaling, but there's nothing we can do about that # here other than avoid propagating it as an unhandled exception. # # See: # See: status_phrase = "Unknown Status" logger.error( f"{exc.__class__.__name__}: {status_code} {status_phrase} " f"from {response.url}\n" f"{response.reason}" ) except exceptions.TwineException as exc: error = True logger.error(f"{exc.__class__.__name__}: {exc.args[0]}") return error if __name__ == "__main__": sys.exit(main()) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/auth.py0000644000175100017510000002541315231700043014753 0ustar00runnerrunnerimport datetime import functools import getpass import json import logging import time import typing as t from typing import cast from urllib.parse import urlparse import requests.auth from id import AmbientCredentialError from id import detect_credential # keyring has an indirect dependency on PyCA cryptography, which has no # pre-built wheels for ppc64le and s390x, see #1158. if t.TYPE_CHECKING: import keyring from keyring.errors import NoKeyringError else: try: import keyring from keyring.errors import NoKeyringError except ModuleNotFoundError: # pragma: no cover keyring = None NoKeyringError = None from twine import exceptions from twine import utils logger = logging.getLogger(__name__) TOKEN_USERNAME: t.Final[str] = "__token__" #: Tokens expire after 15 minutes, let's start allowing renewal/replacement #: after 10 minutes that way if we fail, we may still have time to replace it #: before it expires. Thus, if our current time + this threshold is past the #: greater or equal to the expiration time, we should start trying to replace #: the token. TOKEN_RENEWAL_THRESHOLD: t.Final[datetime.timedelta] = datetime.timedelta( minutes=5, ) class CredentialInput: def __init__( self, username: t.Optional[str] = None, password: t.Optional[str] = None ) -> None: self.username = username self.password = password class TrustedPublishingTokenRetrievalError(t.TypedDict): code: str description: str class TrustedPublishingToken(t.TypedDict, total=False): message: t.Optional[str] errors: t.Optional[list[TrustedPublishingTokenRetrievalError]] token: t.Optional[str] success: t.Optional[bool] # Depends on https://github.com/pypi/warehouse/issues/18235 expires: t.Optional[int] class TrustedPublishingAuthenticator(requests.auth.AuthBase): def __init__( self, resolver: "Resolver", ) -> None: self.resolver = resolver def __call__( self, request: "requests.models.PreparedRequest" ) -> "requests.models.PreparedRequest": token = self.resolver.make_trusted_publishing_token() if token is None: raise exceptions.TrustedPublishingFailure( "Expected a trusted publishing token but got None" ) # Instead of reconstructing Basic Auth headers ourself, let's just # rely on the underlying class to do the right thing. basic_auth = requests.auth.HTTPBasicAuth( username=TOKEN_USERNAME, password=token, ) return cast(requests.models.PreparedRequest, basic_auth(request)) class Resolver: _tp_token: t.Optional[TrustedPublishingToken] = None _expires: t.Optional[int] = None def __init__( self, config: utils.RepositoryConfig, input: CredentialInput, ) -> None: self.config = config self.input = input @property @functools.lru_cache() def authenticator(self) -> "requests.auth.AuthBase": username = self.username password = self.password if self._tp_token: # If `self.password` ended up getting a Trusted Publishing token, # we've cached it here so we should use that as the authenticator. # We have a custom authenticator so we can repeatedly invoke # `make_trusted_publishing_token` which if the token is 10 minutes # old or more, we should get a new one automatically. return TrustedPublishingAuthenticator(resolver=self) if username and password: return requests.auth.HTTPBasicAuth( username=username, password=password, ) raise exceptions.InvalidConfiguration( "could not determine credentials for configured repository" ) @classmethod def choose(cls, interactive: bool) -> t.Type["Resolver"]: return cls if interactive else Private @property @functools.lru_cache() def username(self) -> t.Optional[str]: if self.is_pypi() and not self.input.username: # Default username. self.input.username = TOKEN_USERNAME return utils.get_userpass_value( self.input.username, self.config, key="username", prompt_strategy=self.username_from_keyring_or_prompt, ) @property @functools.lru_cache() def password(self) -> t.Optional[str]: return utils.get_userpass_value( self.input.password, self.config, key="password", prompt_strategy=self.password_from_keyring_or_trusted_publishing_or_prompt, ) def _has_valid_cached_tp_token(self) -> bool: return self._tp_token is not None and ( int(time.time()) + TOKEN_RENEWAL_THRESHOLD.seconds < cast(int, self._tp_token.get("expires", self._expires)) ) def _make_trusted_publishing_token(self) -> t.Optional[TrustedPublishingToken]: if self._has_valid_cached_tp_token(): return self._tp_token # Trusted publishing (OpenID Connect): get one token from the CI # system, and exchange that for a PyPI token. repository_domain = cast(str, urlparse(self.system).netloc) session = utils.make_requests_session() # Indices are expected to support `https://{domain}/_/oidc/audience`, # which tells OIDC exchange clients which audience to use. audience_url = f"https://{repository_domain}/_/oidc/audience" resp = session.get(audience_url, timeout=5) resp.raise_for_status() audience = cast(str, resp.json()["audience"]) try: oidc_token = detect_credential(audience) except AmbientCredentialError as e: # If we get here, we're on a supported CI platform for trusted # publishing, and we have not been given any token, so we can error. raise exceptions.TrustedPublishingFailure( "Unable to retrieve an OIDC token from the CI platform for " f"trusted publishing {e}" ) if oidc_token is None: logger.warning("This environment is not supported for trusted publishing") if self._tp_token and int(time.time()) > cast( int, self._tp_token.get("expires", self._expires) ): return None # Fall back to prompting for a token (if possible) # The cached trusted publishing token may still be valid for a # while longer, let's continue using it instead of prompting return self._tp_token logger.warning("Got OIDC token for audience %s", audience) token_exchange_url = f"https://{repository_domain}/_/oidc/mint-token" mint_token_resp = session.post( token_exchange_url, json={"token": oidc_token}, timeout=5, # S113 wants a timeout ) try: mint_token_payload = mint_token_resp.json() except json.JSONDecodeError: raise exceptions.TrustedPublishingFailure( "The token-minting request returned invalid JSON" ) if not mint_token_resp.ok: reasons = "\n".join( f"* `{error['code']}`: {error['description']}" for error in mint_token_payload["errors"] ) raise exceptions.TrustedPublishingFailure( "The token request failed; the index server gave the following" f" reasons:\n\n{reasons}" ) logger.warning("Minted upload token for trusted publishing") self._tp_token = cast(TrustedPublishingToken, mint_token_payload) self._expires = int(time.time()) + 900 return self._tp_token def make_trusted_publishing_token(self) -> t.Optional[str]: mint_token_payload = self._make_trusted_publishing_token() if not mint_token_payload: return None return cast(str, mint_token_payload["token"]) @property def system(self) -> t.Optional[str]: return self.config["repository"] def get_username_from_keyring(self) -> t.Optional[str]: if keyring is None: logger.info("keyring module is not available") return None try: system = cast(str, self.system) logger.info("Querying keyring for username") creds = keyring.get_credential(system, None) if creds: return creds.username except AttributeError: # To support keyring prior to 15.2 pass except Exception as exc: logger.warning("Error getting username from keyring", exc_info=exc) return None def get_password_from_keyring(self) -> t.Optional[str]: if keyring is None: logger.info("keyring module is not available") return None try: system = cast(str, self.system) username = cast(str, self.username) logger.info("Querying keyring for password") return cast(str, keyring.get_password(system, username)) except NoKeyringError: logger.info("No keyring backend found") except Exception as exc: logger.warning("Error getting password from keyring", exc_info=exc) return None def username_from_keyring_or_prompt(self) -> str: username = self.get_username_from_keyring() if username: logger.info("username set from keyring") return username return self.prompt("username", input) def password_from_keyring_or_trusted_publishing_or_prompt(self) -> str: password = self.get_password_from_keyring() if password: logger.info("password set from keyring") return password if self.is_pypi() and self.username == TOKEN_USERNAME: logger.info( "Trying to use trusted publishing (no token was explicitly provided)" ) if (token := self.make_trusted_publishing_token()) is not None: return token # Prompt for API token when required. what = "API token" if self.is_pypi() else "password" return self.prompt(what, getpass.getpass) def prompt(self, what: str, how: t.Callable[..., str]) -> str: return how(f"Enter your {what}: ") def is_pypi(self) -> bool: """As of 2024-01-01, PyPI requires API tokens for uploads.""" return cast(str, self.config["repository"]).startswith( ( utils.DEFAULT_REPOSITORY, utils.TEST_REPOSITORY, ) ) class Private(Resolver): def prompt(self, what: str, how: t.Optional[t.Callable[..., str]] = None) -> str: raise exceptions.NonInteractive(f"Credential not found for {what}.") ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/cli.py0000644000175100017510000000760415231700043014563 0ustar00runnerrunner# Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import importlib.metadata as importlib_metadata import logging.config from typing import Any, List, Tuple import rich import rich.highlighter import rich.logging import rich.theme import twine args = argparse.Namespace() def configure_output() -> None: # Configure the global Console, available via rich.get_console(). # https://rich.readthedocs.io/en/latest/reference/init.html # https://rich.readthedocs.io/en/latest/console.html rich.reconfigure( # Setting force_terminal makes testing easier by ensuring color codes. This # could be based on FORCE_COLORS or PY_COLORS in os.environ, since Rich # doesn't support that (https://github.com/Textualize/rich/issues/343). force_terminal=True, no_color=getattr(args, "no_color", False), highlight=False, theme=rich.theme.Theme( { "logging.level.debug": "green", "logging.level.info": "blue", "logging.level.warning": "yellow", "logging.level.error": "red", "logging.level.critical": "reverse red", } ), ) # Using dictConfig to override existing loggers, which prevents failures in # test_main.py due to capsys not being cleared. logging.config.dictConfig( { "disable_existing_loggers": False, "version": 1, "handlers": { "console": { "class": "rich.logging.RichHandler", "show_time": False, "show_path": False, "highlighter": rich.highlighter.NullHighlighter(), } }, "root": { "handlers": ["console"], }, } ) def list_dependencies_and_versions() -> List[Tuple[str, str]]: deps = [ "readme-renderer", "requests", "requests-toolbelt", "urllib3", "keyring", # optional for non-desktop use "rfc3986", "rich", "packaging", "id", ] result: List[Tuple[str, str]] = [] for dep in deps: try: version = importlib_metadata.version(dep) except importlib_metadata.PackageNotFoundError: version = "NOT INSTALLED" result.append((dep, version)) return result def dep_versions() -> str: return ", ".join( "{}: {}".format(*dependency) for dependency in list_dependencies_and_versions() ) def dispatch(argv: List[str]) -> Any: registered_commands = importlib_metadata.entry_points( group="twine.registered_commands" ) parser = argparse.ArgumentParser(prog="twine") parser.add_argument( "--version", action="version", version=f"%(prog)s version {twine.__version__} ({dep_versions()})", ) parser.add_argument( "--no-color", default=False, required=False, action="store_true", help="disable colored output", ) parser.add_argument( "command", choices=registered_commands.names, ) parser.add_argument( "args", help=argparse.SUPPRESS, nargs=argparse.REMAINDER, ) parser.parse_args(argv, namespace=args) configure_output() main = registered_commands[args.command].load() return main(args.args) ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785167912.5028415 twine-7.0.0/twine/commands/0000755000175100017510000000000015231700051015233 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/commands/__init__.py0000644000175100017510000000571115231700043017351 0ustar00runnerrunner"""Module containing the logic for the ``twine`` sub-commands. The contents of this package are not a public API. For more details, see https://github.com/pypa/twine/issues/194 and https://github.com/pypa/twine/issues/665. """ # Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import fnmatch import glob import os.path from typing import Dict, List, NamedTuple from twine import exceptions __all__: List[str] = [] def _group_wheel_files_first(files: List[str]) -> List[str]: if not any(fname for fname in files if fname.endswith(".whl")): # Return early if there's no wheel files return files files.sort(key=lambda x: -1 if x.endswith(".whl") else 0) return files def _find_dists(dists: List[str]) -> List[str]: uploads = [] for filename in dists: if os.path.exists(filename): uploads.append(filename) continue # The filename didn't exist so it may be a glob files = glob.glob(filename) # If nothing matches, files is [] if not files: raise exceptions.InvalidDistribution( "Cannot find file (or expand pattern): '%s'" % filename ) # Otherwise, files will be filenames that exist uploads.extend(files) return _group_wheel_files_first(uploads) class Inputs(NamedTuple): """Represents structured user inputs.""" dists: List[str] signatures: Dict[str, str] attestations_by_dist: Dict[str, List[str]] def _split_inputs( inputs: List[str], ) -> Inputs: """ Split the unstructured list of input files provided by the user into groups. Three groups are returned: upload files (i.e. dists), signatures, and attestations. Upload files are returned as a linear list, signatures are returned as a dict of ``basename -> path``, and attestations are returned as a dict of ``dist-path -> [attestation-path]``. """ signatures = {os.path.basename(i): i for i in fnmatch.filter(inputs, "*.asc")} attestations = fnmatch.filter(inputs, "*.*.attestation") dists = [ dist for dist in inputs if dist not in (set(signatures.values()) | set(attestations)) ] attestations_by_dist = {} for dist in dists: dist_basename = os.path.basename(dist) attestations_by_dist[dist] = [ a for a in attestations if os.path.basename(a).startswith(dist_basename) ] return Inputs(dists, signatures, attestations_by_dist) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/commands/check.py0000644000175100017510000001355515231700043016674 0ustar00runnerrunner"""Module containing the logic for ``twine check``.""" # Copyright 2018 Dustin Ingram # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import email.message import io import logging import re from typing import Dict, List, Tuple import readme_renderer.rst from rich import print from twine import commands from twine import package as package_file logger = logging.getLogger(__name__) _RENDERERS = { None: readme_renderer.rst, # Default if description_content_type is None "text/plain": None, # Rendering cannot fail "text/x-rst": readme_renderer.rst, "text/markdown": None, # Rendering cannot fail } # Regular expression used to capture and reformat docutils warnings into # something that a human can understand. This is loosely borrowed from # Sphinx: https://github.com/sphinx-doc/sphinx/blob # /c35eb6fade7a3b4a6de4183d1dd4196f04a5edaf/sphinx/util/docutils.py#L199 _REPORT_RE = re.compile( r"^:(?P(?:\d+)?): " r"\((?PDEBUG|INFO|WARNING|ERROR|SEVERE)/(\d+)?\) " r"(?P.*)", re.DOTALL | re.MULTILINE, ) class _WarningStream(io.StringIO): def write(self, text: str) -> int: matched = _REPORT_RE.search(text) if matched: line = matched.group("line") level_text = matched.group("level").capitalize() message = matched.group("message").rstrip("\r\n") text = f"line {line}: {level_text}: {message}\n" return super().write(text) def __str__(self) -> str: return self.getvalue().strip() def _parse_content_type(value: str) -> Tuple[str, Dict[str, str]]: """Implement logic of deprecated cgi.parse_header(). From https://docs.python.org/3.11/library/cgi.html#cgi.parse_header. """ msg = email.message.EmailMessage() msg["content-type"] = value return msg.get_content_type(), msg["content-type"].params def _check_file( filename: str, render_warning_stream: _WarningStream ) -> Tuple[List[str], bool]: """Check given distribution.""" warnings = [] is_ok = True package = package_file.PackageFile.from_filename(filename, comment=None) metadata = package.metadata_dictionary() description = metadata.get("description") description_content_type = metadata.get("description_content_type") if description_content_type is None: warnings.append( "`long_description_content_type` missing. defaulting to `text/x-rst`." ) description_content_type = "text/x-rst" content_type, params = _parse_content_type(description_content_type) renderer = _RENDERERS.get(content_type, _RENDERERS[None]) if not description or description.rstrip() == "UNKNOWN": warnings.append("`long_description` missing.") elif renderer: rendering_result = renderer.render( description, stream=render_warning_stream, **params ) if rendering_result is None: is_ok = False return warnings, is_ok def check( dists: List[str], strict: bool = False, ) -> bool: """Check that a distribution will render correctly on PyPI and display the results. This is currently only validates ``long_description``, but more checks could be added. :param dists: The distribution files to check. :param output_stream: The destination of the resulting output. :param strict: If ``True``, treat warnings as errors. :return: ``True`` if there are rendering errors, otherwise ``False``. """ dists = commands._find_dists(dists) uploads, _, _ = commands._split_inputs(dists) if not uploads: # Return early, if there are no files to check. logger.error("No files to check.") return False failure = False for filename in uploads: print(f"Checking {filename}: ", end="") render_warning_stream = _WarningStream() warnings, is_ok = _check_file(filename, render_warning_stream) # Print the status and/or error if not is_ok: failure = True print("[red]FAILED[/red]") logger.error( "`long_description` has syntax errors in markup" " and would not be rendered on PyPI." f"\n{render_warning_stream}" ) elif warnings: if strict: failure = True print("[red]FAILED due to warnings[/red]") else: print("[yellow]PASSED with warnings[/yellow]") else: print("[green]PASSED[/green]") # Print warnings after the status and/or error for message in warnings: logger.warning(message) return failure def main(args: List[str]) -> bool: """Execute the ``check`` command. :param args: The command-line arguments. :return: The exit status of the ``check`` command. """ parser = argparse.ArgumentParser(prog="twine check") parser.add_argument( "dists", nargs="+", metavar="dist", help="The distribution files to check, usually dist/*", ) parser.add_argument( "--strict", action="store_true", default=False, required=False, help="Fail on warnings", ) parsed_args = parser.parse_args(args) # Call the check function with the arguments from the command line return check(parsed_args.dists, strict=parsed_args.strict) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/commands/register.py0000644000175100017510000000553115231700043017436 0ustar00runnerrunner"""Module containing the logic for ``twine register``.""" # Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import os.path from typing import List, cast from rich import print from twine import exceptions from twine import package as package_file from twine import settings def register(register_settings: settings.Settings, package: str) -> None: """Pre-register a package name with a repository before uploading a distribution. Pre-registration is not supported on PyPI, so the ``register`` command is only necessary if you are using a different repository that requires it. :param register_settings: The configured options relating to repository registration. :param package: The path of the distribution to use for package metadata. :raises twine.exceptions.TwineException: The registration failed due to a configuration error. :raises requests.HTTPError: The repository responded with an error. """ repository_url = cast(str, register_settings.repository_config["repository"]) print(f"Registering package to {repository_url}") repository = register_settings.create_repository() if not os.path.exists(package): raise exceptions.PackageNotFound( f'"{package}" does not exist on the file system.' ) resp = repository.register( package_file.PackageFile.from_filename(package, register_settings.comment) ) repository.close() if resp.is_redirect: raise exceptions.RedirectDetected.from_args( repository_url, resp.headers["location"], ) resp.raise_for_status() def main(args: List[str]) -> None: """Execute the ``register`` command. :param args: The command-line arguments. """ parser = argparse.ArgumentParser( prog="twine register", description="register operation is not required with PyPI.org", ) settings.Settings.register_argparse_arguments(parser) parser.add_argument( "package", metavar="package", help="File from which we read the package metadata.", ) parsed_args = parser.parse_args(args) register_settings = settings.Settings.from_argparse(parsed_args) # Call the register function with the args from the command line register(register_settings, parsed_args.package) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/commands/upload.py0000644000175100017510000002300115231700043017066 0ustar00runnerrunner"""Module containing the logic for ``twine upload``.""" # Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import logging from typing import Dict, List, cast import requests from rich import print from twine import commands from twine import exceptions from twine import package as package_file from twine import settings from twine import utils logger = logging.getLogger(__name__) def skip_upload( response: requests.Response, skip_existing: bool, package: package_file.PackageFile ) -> bool: """Determine if a failed upload is an error or can be safely ignored. :param response: The response from attempting to upload ``package`` to a repository. :param skip_existing: If ``True``, use the status and content of ``response`` to determine if the package already exists on the repository. If so, then a failed upload is safe to ignore. :param package: The package that was being uploaded. :return: ``True`` if a failed upload can be safely ignored, otherwise ``False``. """ if not skip_existing: return False status = response.status_code reason = getattr(response, "reason", "").lower() text = getattr(response, "text", "").lower() # NOTE(sigmavirus24): PyPI presently returns a 400 status code with the # error message in the reason attribute. Other implementations return a # 403 or 409 status code. return ( # pypiserver (https://pypi.org/project/pypiserver) status == 409 # PyPI / TestPyPI / GCP Artifact Registry or (status == 400 and any("already exist" in x for x in [reason, text])) ) def _make_package( filename: str, signatures: Dict[str, str], attestations: List[str], upload_settings: settings.Settings, ) -> package_file.PackageFile: """Create and sign a package, based off of filename, signatures, and settings. Additionally, any supplied attestations are attached to the package when the settings indicate to do so. """ package = package_file.PackageFile.from_filename(filename, upload_settings.comment) signed_name = package.signed_basefilename if signed_name in signatures: package.add_gpg_signature(signatures[signed_name], signed_name) elif upload_settings.sign: package.sign(upload_settings.sign_with, upload_settings.identity) # Attestations are only attached if explicitly requested with `--attestations`. if upload_settings.attestations: # Passing `--attestations` without any actual attestations present # indicates user confusion, so we fail rather than silently allowing it. if not attestations: raise exceptions.InvalidDistribution( "Upload with attestations requested, but " f"{filename} has no associated attestations" ) package.add_attestations(attestations) file_size = utils.get_file_size(package.filename) logger.info(f"{package.filename} ({file_size})") if package.gpg_signature: logger.info(f"Signed with {package.signed_filename}") return package def upload(upload_settings: settings.Settings, dists: List[str]) -> None: """Upload one or more distributions to a repository, and display the progress. If a package already exists on the repository, most repositories will return an error response. However, if ``upload_settings.skip_existing`` is ``True``, a message will be displayed and any remaining distributions will be uploaded. For known repositories (like PyPI), the web URLs of successfully uploaded packages will be displayed. :param upload_settings: The configured options related to uploading to a repository. :param dists: The distribution files to upload to the repository. This can also include ``.asc`` and ``.attestation`` files, which will be added to their respective file uploads. :raises twine.exceptions.TwineException: The upload failed due to a configuration error. :raises requests.HTTPError: The repository responded with an error. """ upload_settings.check_repository_url() upload_settings.verify_feature_capability() repository_url = cast(str, upload_settings.repository_config["repository"]) # Attestations are only supported on PyPI and TestPyPI at the moment. # We warn instead of failing to allow twine to be used in local testing # setups (where the PyPI deployment doesn't have a well-known domain). if upload_settings.attestations and not repository_url.startswith( (utils.DEFAULT_REPOSITORY, utils.TEST_REPOSITORY) ): logger.warning( "Only PyPI and TestPyPI support attestations; " "if you experience failures, remove the --attestations flag and " "re-try this command" ) dists = commands._find_dists(dists) # Determine if the user has passed in pre-signed distributions or any attestations. uploads, signatures, attestations_by_dist = commands._split_inputs(dists) print(f"Uploading distributions to {utils.sanitize_url(repository_url)}") packages_to_upload = [ _make_package( filename, signatures, attestations_by_dist[filename], upload_settings ) for filename in uploads ] if any(p.gpg_signature for p in packages_to_upload): if repository_url.startswith((utils.DEFAULT_REPOSITORY, utils.TEST_REPOSITORY)): # Warn the user if they're trying to upload a PGP signature to PyPI # or TestPyPI, which will (as of May 2023) ignore it. # This warning is currently limited to just those indices, since other # indices may still support PGP signatures. logger.warning( "One or more packages has an associated PGP signature; " "these will be silently ignored by the index" ) else: # On other indices, warn the user that twine is considering # removing PGP support outright. logger.warning( "One or more packages has an associated PGP signature; " "a future version of twine may silently ignore these. " "See https://github.com/pypa/twine/issues/1009 for more " "information" ) repository = upload_settings.create_repository() uploaded_packages = [] if signatures and not packages_to_upload: raise exceptions.InvalidDistribution( "Cannot upload signed files by themselves, must upload with a " "corresponding distribution file." ) for package in packages_to_upload: skip_message = ( f"Skipping {package.basefilename} because it appears to already exist" ) # Note: The skip_existing check *needs* to be first, because otherwise # we're going to generate extra HTTP requests against a hardcoded # URL for no reason. if upload_settings.skip_existing and repository.package_is_uploaded(package): logger.warning(skip_message) continue resp = repository.upload(package) logger.info(f"Response from {resp.url}:\n{resp.status_code} {resp.reason}") if resp.text: logger.info(resp.text) # Bug 92. If we get a redirect we should abort because something seems # funky. The behaviour is not well defined and redirects being issued # by PyPI should never happen in reality. This should catch malicious # redirects as well. if resp.is_redirect: raise exceptions.RedirectDetected.from_args( utils.sanitize_url(repository_url), utils.sanitize_url(resp.headers["location"]), ) if skip_upload(resp, upload_settings.skip_existing, package): logger.warning(skip_message) continue utils.check_status_code(resp, upload_settings.verbose) uploaded_packages.append(package) release_urls = repository.release_urls(uploaded_packages) if release_urls: print("\n[green]View at:") for url in release_urls: print(url) # Bug 28. Try to silence a ResourceWarning by clearing the connection # pool. repository.close() def main(args: List[str]) -> None: """Execute the ``upload`` command. :param args: The command-line arguments. """ parser = argparse.ArgumentParser(prog="twine upload") settings.Settings.register_argparse_arguments(parser) parser.add_argument( "dists", nargs="+", metavar="dist", help="The distribution files to upload to the repository " "(package index). Usually dist/* . May additionally contain " "a .asc file to include an existing signature with the " "file upload.", ) parsed_args = parser.parse_args(args) upload_settings = settings.Settings.from_argparse(parsed_args) # Call the upload function with the arguments from the command line return upload(upload_settings, parsed_args.dists) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/distribution.py0000644000175100017510000000023115231700043016520 0ustar00runnerrunnerclass Distribution: def read(self) -> bytes: raise NotImplementedError @property def py_version(self) -> str: return "any" ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/exceptions.py0000644000175100017510000001302615231700043016170 0ustar00runnerrunner"""Module containing exceptions raised by twine.""" # Copyright 2015 Ian Stapleton Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import typing as t class TwineException(Exception): """Base class for all exceptions raised by twine.""" pass class RedirectDetected(TwineException): """A redirect was detected that the user needs to resolve. In some cases, requests refuses to issue a new POST request after a redirect. In order to prevent a confusing user experience, we raise this exception to allow users to know the index they're uploading to is redirecting them. """ @classmethod def from_args(cls, repository_url: str, redirect_url: str) -> "RedirectDetected": if redirect_url == f"{repository_url}/": return cls( f"{repository_url} attempted to redirect to {redirect_url}.\n" f"Your repository URL is missing a trailing slash. " "Please add it and try again.", ) return cls( f"{repository_url} attempted to redirect to {redirect_url}.\n" f"If you trust these URLs, set {redirect_url} as your repository URL " "and try again.", ) class PackageNotFound(TwineException): """A package file was provided that could not be found on the file system. This is only used when attempting to register a package_file. """ pass class UploadToDeprecatedPyPIDetected(TwineException): """An upload attempt was detected to deprecated PyPI domains. The sites pypi.python.org and testpypi.python.org are deprecated. """ @classmethod def from_args( cls, target_url: str, default_url: str, test_url: str ) -> "UploadToDeprecatedPyPIDetected": """Return an UploadToDeprecatedPyPIDetected instance.""" return cls( "You're trying to upload to the legacy PyPI site '{}'. " "Uploading to those sites is deprecated. \n " "The new sites are pypi.org and test.pypi.org. Try using " "{} (or {}) to upload your packages instead. " "These are the default URLs for Twine now. \n More at " "https://packaging.python.org/guides/migrating-to-pypi-org/" " .".format(target_url, default_url, test_url) ) class UnsupportedConfiguration(TwineException): """An upload attempt was detected using features not supported by a repository. The features specified either in configuration or on the command-line. """ class Builder: """Build the parameters for an UnsupportedConfiguration exception. In the event we add additional features we are not allowing with something other than PyPI or TestPyPI, we can use a builder to accumulate them all instead of requiring someone to run multiple times to discover all unsupported configuration options. """ repository_url: str features: t.List[str] def __init__(self) -> None: self.repository_url = "" self.features = [] def with_repository_url( self, repository_url: str ) -> "UnsupportedConfiguration.Builder": self.repository_url = repository_url return self def with_feature(self, feature: str) -> "UnsupportedConfiguration.Builder": self.features.append(feature) return self def finalize(self) -> "UnsupportedConfiguration": return UnsupportedConfiguration( f"The configured repository {self.repository_url!r} does not " "have support for the following features: " f"{', '.join(self.features)} and is an unsupported " "configuration", self.repository_url, *self.features, ) class UnreachableRepositoryURLDetected(TwineException): """An upload attempt was detected to a URL without a protocol prefix. All repository URLs must have a protocol (e.g., ``https://``). """ pass class InvalidSigningConfiguration(TwineException): """Both the sign and identity parameters must be present.""" pass class InvalidSigningExecutable(TwineException): """Signing executable must be installed on system.""" pass class InvalidConfiguration(TwineException): """Raised when configuration is invalid.""" pass class InvalidDistribution(TwineException): """Raised when a distribution is invalid.""" pass class NonInteractive(TwineException): """Raised in non-interactive mode when credentials could not be found.""" pass class TrustedPublishingFailure(TwineException): """Raised if we expected to use trusted publishing but couldn't.""" pass class InvalidPyPIUploadURL(TwineException): """Repository configuration tries to use PyPI with an incorrect URL. For example, https://pypi.org instead of https://upload.pypi.org/legacy. """ pass class UnableToReadConfigurationFile(TwineException): """Configuration file exists but cannot be read (e.g. encoding issue).""" pass ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/package.py0000644000175100017510000003150015231700043015377 0ustar00runnerrunner# Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import hashlib import io import json import logging import os import re import subprocess from typing import Any, Dict, List, NamedTuple, Optional, Tuple, TypedDict from packaging import errors from packaging import metadata from packaging import version from rich import print from twine import exceptions from twine import sdist from twine import wheel DIST_TYPES = { "bdist_wheel": wheel.Wheel, "sdist": sdist.SDist, } DIST_EXTENSIONS = { ".whl": "bdist_wheel", ".tar.gz": "sdist", ".zip": "sdist", } logger = logging.getLogger(__name__) def _safe_name(name: str) -> str: """Convert an arbitrary string to a standard distribution name. Any runs of non-alphanumeric/. characters are replaced with a single '-'. Copied from pkg_resources.safe_name for compatibility with warehouse. See https://github.com/pypa/twine/issues/743. """ return re.sub("[^A-Za-z0-9.]+", "-", name) # Map ``metadata.RawMetadata`` fields to ``PackageMetadata`` fields. Some # fields are renamed to match the names expected in the upload form. _RAW_TO_PACKAGE_METADATA = { # Metadata 1.0 - PEP 241 "metadata_version": "metadata_version", "name": "name", "version": "version", "platforms": "platform", # Renamed "summary": "summary", "description": "description", "keywords": "keywords", "home_page": "home_page", "author": "author", "author_email": "author_email", "license": "license", # Metadata 1.1 - PEP 314 "supported_platforms": "supported_platform", # Renamed "download_url": "download_url", "classifiers": "classifiers", "requires": "requires", "provides": "provides", "obsoletes": "obsoletes", # Metadata 1.2 - PEP 345 "maintainer": "maintainer", "maintainer_email": "maintainer_email", "requires_dist": "requires_dist", "provides_dist": "provides_dist", "obsoletes_dist": "obsoletes_dist", "requires_python": "requires_python", "requires_external": "requires_external", "project_urls": "project_urls", # Metadata 2.1 - PEP 566 "description_content_type": "description_content_type", "provides_extra": "provides_extra", # Metadata 2.2 - PEP 643 "dynamic": "dynamic", # Metadata 2.4 - PEP 639 "license_expression": "license_expression", "license_files": "license_file", # Renamed } class PackageMetadata(TypedDict, total=False): # Metadata 1.0 - PEP 241 metadata_version: str name: str version: str platform: List[str] summary: str description: str keywords: List[str] home_page: str author: str author_email: str license: str # Metadata 1.1 - PEP 314 supported_platform: List[str] download_url: str classifiers: List[str] requires: List[str] provides: List[str] obsoletes: List[str] # Metadata 1.2 - PEP 345 maintainer: str maintainer_email: str requires_dist: List[str] provides_dist: List[str] obsoletes_dist: List[str] requires_python: str requires_external: List[str] project_urls: Dict[str, str] # Metadata 2.1 - PEP 566 description_content_type: str provides_extra: List[str] # Metadata 2.2 - PEP 643 dynamic: List[str] # Metadata 2.4 - PEP 639 license_expression: str license_file: List[str] # Additional metadata comment: str pyversion: str filetype: str gpg_signature: Tuple[str, bytes] attestations: str sha256_digest: str blake2_256_digest: str class PackageFile: def __init__( self, filename: str, comment: Optional[str], metadata: metadata.RawMetadata, python_version: str, filetype: str, ) -> None: self.filename = filename self.basefilename = os.path.basename(filename) self.comment = comment self.metadata = metadata self.python_version = python_version self.filetype = filetype self.safe_name = _safe_name(metadata["name"]) self.version: str = metadata["version"] self.signed_filename = self.filename + ".asc" self.signed_basefilename = self.basefilename + ".asc" self.gpg_signature: Optional[Tuple[str, bytes]] = None self.attestations: Optional[List[Dict[Any, str]]] = None hasher = HashManager(filename) hasher.hash() hexdigest = hasher.hexdigest() self.sha2_digest = hexdigest.sha2 self.blake2_256_digest = hexdigest.blake2 @classmethod def from_filename(cls, filename: str, comment: Optional[str]) -> "PackageFile": # Extract the metadata from the package for ext, dtype in DIST_EXTENSIONS.items(): if filename.endswith(ext): try: dist = DIST_TYPES[dtype](filename) data = dist.read() py_version = dist.py_version except EOFError: raise exceptions.InvalidDistribution( "Invalid distribution file: '%s'" % os.path.basename(filename) ) else: break else: raise exceptions.InvalidDistribution( "Unknown distribution format: '%s'" % os.path.basename(filename) ) # Parse and validate metadata. meta, unparsed = metadata.parse_email(data) # setuptools emits License-File metadata fields while declaring # Metadata-Version 2.1. This is invalid because the metadata # specification does not allow to add arbitrary fields, and because # the semantic implemented by setuptools is different than the one # described in PEP 639. However, rejecting these packages would be # too disruptive. Drop License-File metadata entries from the data # sent to the package index if the declared metadata version is less # than 2.4. if version.Version(meta.get("metadata_version", "0")) < version.Version("2.4"): meta.pop("license_files", None) # Support for metadata version 2.4 requires packaging version 24.1 # or later. When parsing metadata with an older packaging, the # invalid License-File fields are not understood and added to the # unparsed dictionary. Remove them to avoid triggering the # following check. unparsed.pop("license-file", None) if unparsed: raise exceptions.InvalidDistribution( "Invalid distribution metadata: {}".format( "; ".join( f"unrecognized or malformed field {key!r}" for key in unparsed ) ) ) try: metadata.Metadata.from_raw(meta) except errors.ExceptionGroup as group: raise exceptions.InvalidDistribution( "Invalid distribution metadata: {}".format( "; ".join(sorted(str(e) for e in group.exceptions)) ) ) return cls(filename, comment, meta, py_version, dtype) def metadata_dictionary(self) -> PackageMetadata: """Merge multiple sources of metadata into a single dictionary. Includes values from filename, PKG-INFO, hashers, and signature. """ data = PackageMetadata() for key, value in self.metadata.items(): field = _RAW_TO_PACKAGE_METADATA.get(key) if field: # A ``TypedDict`` only support literal key names. Here key # names are computed but they can only be valid key names. data[field] = value # type: ignore[literal-required] # Override name with safe name. data["name"] = self.safe_name # File content. data["pyversion"] = self.python_version data["filetype"] = self.filetype # Additional meta-data: some of these fields may not be set. Some # package repositories do not allow null values, so this only sends # non-null values. In particular, FIPS disables Blake2, making # the digest values null. See https://github.com/pypa/twine/issues/775 if self.comment is not None: data["comment"] = self.comment if self.sha2_digest is not None: data["sha256_digest"] = self.sha2_digest if self.gpg_signature is not None: data["gpg_signature"] = self.gpg_signature if self.attestations is not None: data["attestations"] = json.dumps(self.attestations) if self.blake2_256_digest: data["blake2_256_digest"] = self.blake2_256_digest return data def add_attestations(self, attestations: List[str]) -> None: loaded_attestations = [] for attestation in attestations: with open(attestation, "rb") as att: try: loaded_attestations.append(json.load(att)) except json.JSONDecodeError: raise exceptions.InvalidDistribution( f"invalid JSON in attestation: {attestation}" ) self.attestations = loaded_attestations def add_gpg_signature( self, signature_filepath: str, signature_filename: str ) -> None: if self.gpg_signature is not None: raise exceptions.InvalidDistribution("GPG Signature can only be added once") with open(signature_filepath, "rb") as gpg: self.gpg_signature = (signature_filename, gpg.read()) def sign(self, sign_with: str, identity: Optional[str]) -> None: print(f"Signing {self.basefilename}") gpg_args: Tuple[str, ...] = (sign_with, "--detach-sign") if identity: gpg_args += ("--local-user", identity) gpg_args += ("-a", self.filename) self.run_gpg(gpg_args) self.add_gpg_signature(self.signed_filename, self.signed_basefilename) @classmethod def run_gpg(cls, gpg_args: Tuple[str, ...]) -> None: try: subprocess.check_call(gpg_args) return except FileNotFoundError: if gpg_args[0] != "gpg": raise exceptions.InvalidSigningExecutable( f"{gpg_args[0]} executable not available." ) logger.warning("gpg executable not available. Attempting fallback to gpg2.") try: subprocess.check_call(("gpg2",) + gpg_args[1:]) except FileNotFoundError: raise exceptions.InvalidSigningExecutable( "'gpg' or 'gpg2' executables not available.\n" "Try installing one of these or specifying an executable " "with the --sign-with flag." ) class Hexdigest(NamedTuple): sha2: Optional[str] blake2: Optional[str] class HashManager: """Manage our hashing objects for simplicity. This will also allow us to better test this logic. """ def __init__(self, filename: str) -> None: """Initialize our manager and hasher objects.""" self.filename = filename self._sha2_hasher = hashlib.sha256() self._blake_hasher = None try: self._blake_hasher = hashlib.blake2b(digest_size=256 // 8) except (ValueError, TypeError, AttributeError): # FIPS mode disables blake2 pass def _sha2_update(self, content: bytes) -> None: if self._sha2_hasher is not None: self._sha2_hasher.update(content) def _sha2_hexdigest(self) -> Optional[str]: if self._sha2_hasher is not None: return self._sha2_hasher.hexdigest() return None def _blake_update(self, content: bytes) -> None: if self._blake_hasher is not None: self._blake_hasher.update(content) def _blake_hexdigest(self) -> Optional[str]: if self._blake_hasher is not None: return self._blake_hasher.hexdigest() return None def hash(self) -> None: """Hash the file contents.""" with open(self.filename, "rb") as fp: for content in iter(lambda: fp.read(io.DEFAULT_BUFFER_SIZE), b""): self._sha2_update(content) self._blake_update(content) def hexdigest(self) -> Hexdigest: """Return the hexdigest for the file.""" return Hexdigest( self._sha2_hexdigest(), self._blake_hexdigest(), ) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/py.typed0000644000175100017510000000000015231700043015120 0ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/repository.py0000644000175100017510000002150015231700043016222 0ustar00runnerrunner# Copyright 2015 Ian Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import logging from typing import Any, Dict, List, Optional, Set, Tuple import requests import requests_toolbelt import rich.progress from rich import print from twine import package as package_file from twine.utils import make_requests_session LEGACY_PYPI = "https://pypi.python.org/" LEGACY_TEST_PYPI = "https://testpypi.python.org/" WAREHOUSE = "https://upload.pypi.org/" OLD_WAREHOUSE = "https://upload.pypi.io/" TEST_WAREHOUSE = "https://test.pypi.org/" WAREHOUSE_WEB = "https://pypi.org/" logger = logging.getLogger(__name__) class Repository: def __init__( self, repository_url: str, username: Optional[str], password: Optional[str], disable_progress_bar: bool = False, ) -> None: self.url = repository_url self.session = make_requests_session() # requests.Session.auth should be Union[None, Tuple[str, str], ...] # But username or password could be None # See TODO for utils.RepositoryConfig self.session.auth = ( (username or "", password or "") if username or password else None ) logger.info(f"username: {username if username else ''}") logger.info(f"password: <{'hidden' if password else 'empty'}>") # Working around https://github.com/python/typing/issues/182 self._releases_json_data: Dict[str, Dict[str, Any]] = {} self.disable_progress_bar = disable_progress_bar def close(self) -> None: self.session.close() @staticmethod def _convert_metadata_to_list_of_tuples( data: package_file.PackageMetadata, ) -> List[Tuple[str, Any]]: # This does what ``warehouse.forklift.parse_form_metadata()`` does, in reverse. data_to_send: List[Tuple[str, Any]] = [] for key, value in data.items(): if key == "gpg_signature": assert isinstance(value, tuple) data_to_send.append((key, value)) elif key == "project_urls": assert isinstance(value, dict) for name, url in value.items(): data_to_send.append((key, f"{name}, {url}")) elif key == "keywords": assert isinstance(value, list) data_to_send.append((key, ", ".join(value))) elif isinstance(value, (list, tuple)): data_to_send.extend((key, item) for item in value) else: assert isinstance(value, str) data_to_send.append((key, value)) return data_to_send def set_certificate_authority(self, cacert: Optional[str]) -> None: if cacert: self.session.verify = cacert def set_client_certificate(self, clientcert: Optional[str]) -> None: if clientcert: self.session.cert = clientcert def register(self, package: package_file.PackageFile) -> requests.Response: print(f"Registering {package.basefilename}") metadata = package.metadata_dictionary() data_to_send = self._convert_metadata_to_list_of_tuples(metadata) data_to_send.append((":action", "submit")) data_to_send.append(("protocol_version", "1")) encoder = requests_toolbelt.MultipartEncoder(data_to_send) resp = self.session.post( self.url, data=encoder, allow_redirects=False, headers={"Content-Type": encoder.content_type}, ) # Bug 28. Try to silence a ResourceWarning by releasing the socket. resp.close() return resp def _upload(self, package: package_file.PackageFile) -> requests.Response: print(f"Uploading {package.basefilename}") metadata = package.metadata_dictionary() data_to_send = self._convert_metadata_to_list_of_tuples(metadata) data_to_send.append((":action", "file_upload")) data_to_send.append(("protocol_version", "1")) with open(package.filename, "rb") as fp: data_to_send.append( ( "content", (package.basefilename, fp, "application/octet-stream"), ) ) encoder = requests_toolbelt.MultipartEncoder(data_to_send) with rich.progress.Progress( "[progress.percentage]{task.percentage:>3.0f}%", rich.progress.BarColumn(), rich.progress.DownloadColumn(), "•", rich.progress.TimeRemainingColumn( compact=True, elapsed_when_finished=True, ), "•", rich.progress.TransferSpeedColumn(), disable=self.disable_progress_bar, ) as progress: task_id = progress.add_task("", total=encoder.len) monitor = requests_toolbelt.MultipartEncoderMonitor( encoder, lambda monitor: progress.update( task_id, completed=monitor.bytes_read, ), ) resp = self.session.post( self.url, data=monitor, allow_redirects=False, headers={"Content-Type": monitor.content_type}, ) return resp def upload( self, package: package_file.PackageFile, max_redirects: int = 5 ) -> requests.Response: number_of_redirects = 0 while number_of_redirects < max_redirects: resp = self._upload(package) if resp.status_code == requests.codes.OK: return resp if 500 <= resp.status_code < 600: number_of_redirects += 1 logger.warning( f'Received "{resp.status_code}: {resp.reason}"' "\nPackage upload appears to have failed." f" Retry {number_of_redirects} of {max_redirects}." ) else: return resp return resp def package_is_uploaded( self, package: package_file.PackageFile, bypass_cache: bool = False ) -> bool: """Determine if a package has been uploaded to PyPI already. .. warning:: This does not support indexes other than PyPI or TestPyPI :param package: The package file that will otherwise be uploaded. :type package: :class:`~twine.package.PackageFile` :param bypass_cache: Force a request to PyPI. :type bypass_cache: bool :returns: True if package has already been uploaded, False otherwise :rtype: bool """ # NOTE(sigmavirus24): Not all indices are PyPI and pypi.io doesn't # have a similar interface for finding the package versions. if not self.url.startswith((LEGACY_PYPI, WAREHOUSE, OLD_WAREHOUSE)): return False safe_name = package.safe_name releases = None if not bypass_cache: releases = self._releases_json_data.get(safe_name) if releases is None: url = f"{LEGACY_PYPI}pypi/{safe_name}/json" headers = {"Accept": "application/json"} response = self.session.get(url, headers=headers) if response.status_code == 200: releases = response.json()["releases"] else: releases = {} self._releases_json_data[safe_name] = releases packages = releases.get(package.version, []) for uploaded_package in packages: if uploaded_package["filename"] == package.basefilename: return True return False def release_urls(self, packages: List[package_file.PackageFile]) -> Set[str]: if self.url.startswith(WAREHOUSE): url = WAREHOUSE_WEB elif self.url.startswith(TEST_WAREHOUSE): url = TEST_WAREHOUSE else: return set() return { f"{url}project/{package.safe_name}/{package.version}/" for package in packages } def verify_package_integrity(self, package: package_file.PackageFile) -> None: # TODO(sigmavirus24): Add a way for users to download the package and # check its hash against what it has locally. pass ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/sdist.py0000644000175100017510000000554615231700043015145 0ustar00runnerrunnerimport os import tarfile import zipfile from contextlib import suppress from twine import distribution from twine import exceptions class SDist(distribution.Distribution): def __new__(cls, filename: str) -> "SDist": if cls is not SDist: return object.__new__(cls) FORMATS = { ".tar.gz": TarGzSDist, ".zip": ZipSDist, } for extension, impl in FORMATS.items(): if filename.endswith(extension): return impl(filename) raise exceptions.InvalidDistribution(f"Unsupported sdist format: {filename}") def __init__(self, filename: str) -> None: if not os.path.exists(filename): raise exceptions.InvalidDistribution(f"No such file: {filename}") self.filename = filename @property def py_version(self) -> str: return "source" class TarGzSDist(SDist): def read(self) -> bytes: with tarfile.open(self.filename, "r:gz") as sdist: # The sdist must contain a single top-level directory... root = os.path.commonpath(sdist.getnames()) if root in {".", "/", ""}: raise exceptions.InvalidDistribution( f"Too many top-level members in sdist archive: {self.filename}" ) # ...containing the package metadata in a ``PKG-INFO`` file. with suppress(KeyError): member = sdist.getmember(root.rstrip("/") + "/PKG-INFO") if not member.isfile(): raise exceptions.InvalidDistribution( f"PKG-INFO is not a regular file: {self.filename}" ) fd = sdist.extractfile(member) assert fd is not None, "for mypy" data = fd.read() if b"Metadata-Version" in data: return data raise exceptions.InvalidDistribution( "No PKG-INFO in archive or " f"PKG-INFO missing 'Metadata-Version': {self.filename}" ) class ZipSDist(SDist): def read(self) -> bytes: with zipfile.ZipFile(self.filename) as sdist: # The sdist must contain a single top-level directory... root = os.path.commonpath(sdist.namelist()) if root in {".", "/", ""}: raise exceptions.InvalidDistribution( f"Too many top-level members in sdist archive: {self.filename}" ) # ...containing the package metadata in a ``PKG-INFO`` file. with suppress(KeyError): data = sdist.read(root.rstrip("/") + "/PKG-INFO") if b"Metadata-Version" in data: return data raise exceptions.InvalidDistribution( "No PKG-INFO in archive or " f"PKG-INFO missing 'Metadata-Version': {self.filename}" ) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/settings.py0000644000175100017510000003152115231700043015647 0ustar00runnerrunner"""Module containing logic for handling settings.""" # Copyright 2018 Ian Stapleton Cordasco # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import contextlib import logging from typing import Any, Optional, cast from twine import auth from twine import exceptions from twine import repository from twine import utils class Settings: """Object that manages the configuration for Twine. This object can only be instantiated with keyword arguments. For example, .. code-block:: python Settings(True, username='fakeusername') Will raise a :class:`TypeError`. Instead, you would want .. code-block:: python Settings(sign=True, username='fakeusername') """ def __init__( self, *, attestations: bool = False, sign: bool = False, sign_with: str = "gpg", identity: Optional[str] = None, username: Optional[str] = None, password: Optional[str] = None, non_interactive: bool = False, comment: Optional[str] = None, config_file: str = utils.DEFAULT_CONFIG_FILE, skip_existing: bool = False, cacert: Optional[str] = None, client_cert: Optional[str] = None, repository_name: str = "pypi", repository_url: Optional[str] = None, verbose: bool = False, disable_progress_bar: bool = False, **ignored_kwargs: Any, ) -> None: """Initialize our settings instance. :param attestations: Whether the package file should be uploaded with attestations. :param sign: Configure whether the package file should be signed. :param sign_with: The name of the executable used to sign the package with. :param identity: The GPG identity that should be used to sign the package file. :param username: The username used to authenticate to the repository (package index). :param password: The password used to authenticate to the repository (package index). :param non_interactive: Do not interactively prompt for username/password if the required credentials are missing. :param comment: The comment to include with each distribution file. :param config_file: The path to the configuration file to use. :param skip_existing: Specify whether twine should continue uploading files if one of them already exists. This primarily supports PyPI. Other package indexes may not be supported. :param cacert: The path to the bundle of certificates used to verify the TLS connection to the package index. :param client_cert: The path to the client certificate used to perform authentication to the index. This must be a single file that contains both the private key and the PEM-encoded certificate. :param repository_name: The name of the repository (package index) to interact with. This should correspond to a section in the config file. :param repository_url: The URL of the repository (package index) to interact with. This will override the settings inferred from ``repository_name``. :param verbose: Show verbose output. :param disable_progress_bar: Disable the progress bar. """ self.config_file = config_file self.comment = comment self.verbose = verbose self.disable_progress_bar = disable_progress_bar self.skip_existing = skip_existing self._handle_repository_options( repository_name=repository_name, repository_url=repository_url, ) self.attestations = attestations self._handle_package_signing( sign=sign, sign_with=sign_with, identity=identity, ) # _handle_certificates relies on the parsed repository config self._handle_certificates(cacert, client_cert) self.auth = auth.Resolver.choose(not non_interactive)( self.repository_config, auth.CredentialInput(username, password), ) @property def username(self) -> Optional[str]: return self.auth.username @property def password(self) -> Optional[str]: with self._allow_noninteractive(): return self.auth.password def _allow_noninteractive(self) -> "contextlib.AbstractContextManager[None]": """Bypass NonInteractive error when client cert is present.""" suppressed = (exceptions.NonInteractive,) if self.client_cert else () return contextlib.suppress(*suppressed) @property def verbose(self) -> bool: return self._verbose @verbose.setter def verbose(self, verbose: bool) -> None: """Initialize a logger based on the --verbose option.""" self._verbose = verbose twine_logger = logging.getLogger("twine") twine_logger.setLevel(logging.INFO if verbose else logging.WARNING) @staticmethod def register_argparse_arguments(parser: argparse.ArgumentParser) -> None: """Register the arguments for argparse.""" parser.add_argument( "-r", "--repository", action=utils.EnvironmentDefault, env="TWINE_REPOSITORY", default="pypi", help="The repository (package index) to upload the package to. " "Should be a section in the config file [default: " "%(default)s]. (Can also be set via %(env)s environment " "variable.)", ) parser.add_argument( "--repository-url", action=utils.EnvironmentDefault, env="TWINE_REPOSITORY_URL", default=None, required=False, help="The repository (package index) URL to upload the package to." " This overrides --repository. " "(Can also be set via %(env)s environment variable.)", ) parser.add_argument( "--attestations", action="store_true", default=False, help="Upload each file's associated attestations.", ) parser.add_argument( "-s", "--sign", action="store_true", default=False, help="Sign files to upload using GPG.", ) parser.add_argument( "--sign-with", default="gpg", help="GPG program used to sign uploads [default: %(default)s].", ) parser.add_argument( "-i", "--identity", help="GPG identity used to sign files.", ) parser.add_argument( "-u", "--username", action=utils.EnvironmentDefault, env="TWINE_USERNAME", required=False, help="The username to authenticate to the repository " "(package index) as. Has no effect on PyPI or TestPyPI. " "(Can also be set via %(env)s environment variable.)", ) parser.add_argument( "-p", "--password", action=utils.EnvironmentDefault, env="TWINE_PASSWORD", required=False, help="The password to authenticate to the repository " "(package index) with. (Can also be set via " "%(env)s environment variable.)", ) parser.add_argument( "--non-interactive", action=utils.EnvironmentFlag, env="TWINE_NON_INTERACTIVE", help="Do not interactively prompt for username/password if the " "required credentials are missing. (Can also be set via " "%(env)s environment variable.)", ) parser.add_argument( "-c", "--comment", help="The comment to include with the distribution file.", ) parser.add_argument( "--config-file", default=utils.DEFAULT_CONFIG_FILE, help="The .pypirc config file to use.", ) parser.add_argument( "--skip-existing", default=False, action="store_true", help="Continue uploading files if one already exists. (Only valid " "when uploading to PyPI. Other implementations may not " "support this.)", ) parser.add_argument( "--cert", action=utils.EnvironmentDefault, env="TWINE_CERT", default=None, required=False, metavar="path", help="Path to alternate CA bundle (can also be set via %(env)s " "environment variable).", ) parser.add_argument( "--client-cert", metavar="path", help="Path to SSL client certificate, a single file containing the" " private key and the certificate in PEM format.", ) parser.add_argument( "--verbose", default=False, required=False, action="store_true", help="Show verbose output.", ) parser.add_argument( "--disable-progress-bar", default=False, required=False, action="store_true", help="Disable the progress bar.", ) @classmethod def from_argparse(cls, args: argparse.Namespace) -> "Settings": """Generate the Settings from parsed arguments.""" settings = vars(args) settings["repository_name"] = settings.pop("repository") settings["cacert"] = settings.pop("cert") return cls(**settings) def _handle_package_signing( self, sign: bool, sign_with: str, identity: Optional[str] ) -> None: if not sign and identity: raise exceptions.InvalidSigningConfiguration( "sign must be given along with identity" ) self.sign = sign self.sign_with = sign_with self.identity = identity def _handle_repository_options( self, repository_name: str, repository_url: Optional[str] ) -> None: self.repository_config = utils.get_repository_from_config( self.config_file, repository_name, repository_url, ) def _handle_certificates( self, cacert: Optional[str], client_cert: Optional[str] ) -> None: self.cacert = utils.get_cacert(cacert, self.repository_config) self.client_cert = utils.get_clientcert(client_cert, self.repository_config) def verify_feature_capability(self) -> None: """Verify configured settings are supported for the configured repository. This presently checks: - ``--skip-existing`` was only provided for PyPI and TestPyPI :raises twine.exceptions.UnsupportedConfiguration: The configured features are not available with the configured repository. """ repository_url = cast(str, self.repository_config["repository"]) if self.skip_existing and not repository_url.startswith( (repository.WAREHOUSE, repository.TEST_WAREHOUSE) ): raise exceptions.UnsupportedConfiguration.Builder().with_feature( "--skip-existing" ).with_repository_url(repository_url).finalize() def check_repository_url(self) -> None: """Verify we are not using legacy PyPI. :raises twine.exceptions.UploadToDeprecatedPyPIDetected: The configured repository URL is for legacy PyPI. """ repository_url = cast(str, self.repository_config["repository"]) if repository_url.startswith( (repository.LEGACY_PYPI, repository.LEGACY_TEST_PYPI) ): raise exceptions.UploadToDeprecatedPyPIDetected.from_args( repository_url, utils.DEFAULT_REPOSITORY, utils.TEST_REPOSITORY ) def create_repository(self) -> repository.Repository: """Create a new repository for uploading.""" repo = repository.Repository( cast(str, self.repository_config["repository"]), self.username, self.password, self.disable_progress_bar, ) repo.set_certificate_authority(self.cacert) repo.set_client_certificate(self.client_cert) return repo ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/utils.py0000644000175100017510000003361515231700043015155 0ustar00runnerrunner# Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import argparse import collections import configparser import functools import logging import os import os.path import unicodedata from typing import Any, Callable, DefaultDict, Dict, Optional, Sequence, Union, cast from urllib.parse import urlparse from urllib.parse import urlunparse import requests import rfc3986 import urllib3 from requests.adapters import HTTPAdapter from requests_toolbelt.utils import user_agent import twine from twine import exceptions # Shim for input to allow testing. input_func = input DEFAULT_REPOSITORY = "https://upload.pypi.org/legacy/" TEST_REPOSITORY = "https://test.pypi.org/legacy/" DEFAULT_CONFIG_FILE = "~/.pypirc" # TODO: In general, it seems to be assumed that the values retrieved from # instances of this type aren't None, except for username and password. # Type annotations would be cleaner if this were Dict[str, str], but that # requires reworking the username/password handling, probably starting with # get_userpass_value. RepositoryConfig = Dict[str, Optional[str]] logger = logging.getLogger(__name__) def _parse_file(path: str, **open_kwargs: Any) -> configparser.RawConfigParser: """Open and parse a configuration file. This helper performs a single open/read operation so that if a UnicodeDecodeError is raised it happens before the parser has been partially populated. """ parser = configparser.RawConfigParser() with open(path, **open_kwargs) as f: parser.read_file(f) return parser def _parse_config(path: str) -> configparser.RawConfigParser: """Parse a config file with a UTF-8 fallback on decode errors. Try to parse using the default system encoding first; if a UnicodeDecodeError occurs, retry using UTF-8 and log that a fallback was used. """ logger.info("Using configuration from %s", path) try: parser = _parse_file(path) except UnicodeDecodeError: logger.info( "Configuration file not readable with default locale encoding, trying UTF-8" ) else: return parser try: parser = _parse_file(path, encoding="utf-8") except UnicodeDecodeError as ude: raise exceptions.UnableToReadConfigurationFile( f"Unable to read configuration file: {path}" ) from ude else: return parser def get_config(path: str) -> Dict[str, RepositoryConfig]: """Read repository configuration from a file (i.e. ~/.pypirc). Format: https://packaging.python.org/specifications/pypirc/ If the default config file doesn't exist, return a default configuration for pypi and testpypi. """ realpath = os.path.realpath(os.path.expanduser(path)) try: parser = _parse_config(realpath) except FileNotFoundError: # User probably set --config-file, but the file can't be read if path != DEFAULT_CONFIG_FILE: raise # Create empty parser for missing default config file parser = configparser.RawConfigParser() # server-login is obsolete, but retained for backwards compatibility defaults: RepositoryConfig = { "username": parser.get("server-login", "username", fallback=None), "password": parser.get("server-login", "password", fallback=None), } config: DefaultDict[str, RepositoryConfig] config = collections.defaultdict(lambda: defaults.copy()) index_servers = parser.get( "distutils", "index-servers", fallback="pypi testpypi" ).split() # Don't require users to manually configure URLs for these repositories config["pypi"]["repository"] = DEFAULT_REPOSITORY if "testpypi" in index_servers: config["testpypi"]["repository"] = TEST_REPOSITORY # Optional configuration values for individual repositories for repository in index_servers: for key in [ "username", "repository", "password", "ca_cert", "client_cert", ]: if parser.has_option(repository, key): config[repository][key] = parser.get(repository, key) # Convert the defaultdict to a regular dict to prevent surprising behavior later on return dict(config) def sanitize_url(url: str) -> str: """Sanitize a URL. Sanitize URLs, removing any user:password combinations and replacing them with asterisks. Returns the original URL if the string is a non-matching pattern. :param url: str containing a URL to sanitize. return: str either sanitized or as entered depending on pattern match. """ uri = rfc3986.urlparse(url) if uri.userinfo: return cast(str, uri.copy_with(userinfo="*" * 8).unsplit()) return url def _validate_repository_url(repository_url: str) -> None: """Validate the given url for allowed schemes and components.""" # Allowed schemes are http and https, based on whether the repository # supports TLS or not, and scheme and host must be present in the URL validator = ( rfc3986.validators.Validator() .allow_schemes("http", "https") .require_presence_of("scheme", "host") ) try: validator.validate(rfc3986.uri_reference(repository_url)) except rfc3986.exceptions.RFC3986Exception as exc: raise exceptions.UnreachableRepositoryURLDetected( f"Invalid repository URL: {exc.args[0]}." ) def get_repository_from_config( config_file: str, repository: str, repository_url: Optional[str] = None, ) -> RepositoryConfig: """Get repository config command-line values or the .pypirc file.""" # Prefer CLI `repository_url` over `repository` or .pypirc if repository_url: _validate_repository_url(repository_url) return _config_from_repository_url(repository_url) try: config = get_config(config_file)[repository] except OSError as exc: raise exceptions.InvalidConfiguration(str(exc)) except KeyError: raise exceptions.InvalidConfiguration( f"Missing '{repository}' section from {config_file}.\n" f"More info: https://packaging.python.org/specifications/pypirc/ " ) except configparser.Error: # NOTE: We intentionally fully mask the configparser exception here, # since it could leak tokens and other sensitive values. raise exceptions.InvalidConfiguration( f"Malformed configuration in {config_file}.\n" f"More info: https://packaging.python.org/specifications/pypirc/ " ) config["repository"] = normalize_repository_url(cast(str, config["repository"])) return config _HOSTNAMES = { "pypi.python.org", "testpypi.python.org", "upload.pypi.org", "test.pypi.org", } def _config_from_repository_url(url: str) -> RepositoryConfig: parsed = urlparse(url) config = {"repository": url, "username": None, "password": None} if parsed.username: config["username"] = parsed.username config["password"] = parsed.password config["repository"] = cast( str, rfc3986.urlparse(url).copy_with(userinfo=None).unsplit() ) config["repository"] = normalize_repository_url(cast(str, config["repository"])) return config def normalize_repository_url(url: str) -> str: parsed = urlparse(url) if parsed.netloc in _HOSTNAMES: return urlunparse(("https",) + parsed[1:]) return urlunparse(parsed) def get_file_size(filename: str) -> str: """Return the size of a file in KB, or MB if >= 1024 KB.""" file_size = os.path.getsize(filename) / 1024 size_unit = "KB" if file_size > 1024: file_size = file_size / 1024 size_unit = "MB" return f"{file_size:.1f} {size_unit}" def check_status_code(response: requests.Response, verbose: bool) -> None: """Generate a helpful message based on the response from the repository. Raise a custom exception for recognized errors. Otherwise, print the response content (based on the verbose option) before re-raising the HTTPError. """ if response.status_code == 410 and "pypi.python.org" in response.url: raise exceptions.UploadToDeprecatedPyPIDetected( f"It appears you're uploading to pypi.python.org (or " f"testpypi.python.org). You've received a 410 error response. " f"Uploading to those sites is deprecated. The new sites are " f"pypi.org and test.pypi.org. Try using {DEFAULT_REPOSITORY} (or " f"{TEST_REPOSITORY}) to upload your packages instead. These are " f"the default URLs for Twine now. More at " f"https://packaging.python.org/guides/migrating-to-pypi-org/." ) elif response.status_code == 405 and "pypi.org" in response.url: raise exceptions.InvalidPyPIUploadURL( f"It appears you're trying to upload to pypi.org but have an " f"invalid URL. You probably want one of these two URLs: " f"{DEFAULT_REPOSITORY} or {TEST_REPOSITORY}. Check your " f"--repository-url value." ) try: response.raise_for_status() except requests.HTTPError as err: if not verbose: logger.warning( "Error during upload. " "Retry with the --verbose option for more details." ) raise err def get_userpass_value( cli_value: Optional[str], config: RepositoryConfig, key: str, prompt_strategy: Optional[Callable[[], str]] = None, ) -> Optional[str]: """Get a credential (e.g. a username or password) from the configuration. Uses the following rules: 1. If ``cli_value`` is specified, use that. 2. If ``config[key]`` is specified, use that. 3. If ``prompt_strategy`` is specified, use its return value. 4. Otherwise return ``None`` :param cli_value: The value supplied from the command line. :param config: A dictionary of repository configuration values. :param key: The credential to look up in ``config``, e.g. ``"username"`` or ``"password"``. :param prompt_strategy: An argumentless function to get the value, e.g. from keyring or by prompting the user. :return: The credential value, i.e. the username or password. """ if cli_value is not None: logger.info(f"{key} set by command options") return cli_value elif config.get(key) is not None: logger.info(f"{key} set from config file") return config[key] elif prompt_strategy: warning = "" value = prompt_strategy() if not value: warning = f"Your {key} is empty" elif any(unicodedata.category(c).startswith("C") for c in value): # See https://www.unicode.org/reports/tr44/#General_Category_Values # Most common case is "\x16" when pasting in Windows Command Prompt warning = f"Your {key} contains control characters" if warning: logger.warning(f"{warning}. Did you enter it correctly?") logger.warning( "See https://twine.readthedocs.io/#entering-credentials " "for more information." ) return value else: return None #: Get the CA bundle via :func:`get_userpass_value`. get_cacert = functools.partial(get_userpass_value, key="ca_cert") #: Get the client certificate via :func:`get_userpass_value`. get_clientcert = functools.partial(get_userpass_value, key="client_cert") def make_requests_session() -> requests.Session: """Prepare a requests Session with retries & twine's user-agent string.""" s = requests.Session() retry = urllib3.Retry( allowed_methods=["GET"], connect=5, total=10, status_forcelist=[500, 501, 502, 503], ) for scheme in ("http://", "https://"): s.mount(scheme, HTTPAdapter(max_retries=retry)) s.headers["User-Agent"] = ( user_agent.UserAgentBuilder("twine", twine.__version__) .include_implementation() .build() ) return s class EnvironmentDefault(argparse.Action): """Get values from environment variable.""" def __init__( self, env: str, required: bool = True, default: Optional[str] = None, **kwargs: Any, ) -> None: default = os.environ.get(env, default) self.env = env if default: required = False super().__init__(default=default, required=required, **kwargs) def __call__( self, parser: argparse.ArgumentParser, namespace: argparse.Namespace, values: Union[str, Sequence[Any], None], option_string: Optional[str] = None, ) -> None: setattr(namespace, self.dest, values) class EnvironmentFlag(argparse.Action): """Set boolean flag from environment variable.""" def __init__(self, env: str, **kwargs: Any) -> None: default = self.bool_from_env(os.environ.get(env)) self.env = env super().__init__(default=default, nargs=0, **kwargs) def __call__( self, parser: argparse.ArgumentParser, namespace: argparse.Namespace, values: Union[str, Sequence[Any], None], option_string: Optional[str] = None, ) -> None: setattr(namespace, self.dest, True) @staticmethod def bool_from_env(val: Optional[str]) -> bool: """Allow '0' and 'false' and 'no' to be False.""" falsey = {"0", "false", "no"} return bool(val and val.lower() not in falsey) ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167907.0 twine-7.0.0/twine/wheel.py0000644000175100017510000000535215231700043015116 0ustar00runnerrunner# Copyright 2013 Donald Stufft # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import os import re import zipfile from typing import List from twine import distribution from twine import exceptions wheel_file_re = re.compile( r"""^(?P(?P.+?)(-(?P\d.+?))?) ((-(?P\d.*?))?-(?P.+?)-(?P.+?)-(?P.+?) \.whl|\.dist-info)$""", re.VERBOSE, ) class Wheel(distribution.Distribution): def __init__(self, filename: str) -> None: if not os.path.exists(filename): raise exceptions.InvalidDistribution(f"No such file: {filename}") self.filename = filename @property def py_version(self) -> str: wheel_info = wheel_file_re.match(os.path.basename(self.filename)) if wheel_info is None: return "any" else: return wheel_info.group("pyver") @staticmethod def find_candidate_metadata_files(names: List[str]) -> List[List[str]]: """Filter files that may be METADATA files.""" tuples = [x.split("/") for x in names if "METADATA" in x] return [x[1] for x in sorted((len(x), x) for x in tuples)] def read(self) -> bytes: fqn = os.path.abspath(os.path.normpath(self.filename)) if not os.path.exists(fqn): raise exceptions.InvalidDistribution("No such file: %s" % fqn) if fqn.endswith(".whl"): archive = zipfile.ZipFile(fqn) names = archive.namelist() def read_file(name: str) -> bytes: return archive.read(name) else: raise exceptions.InvalidDistribution( "Not a known archive format for file: %s" % fqn ) searched_files: List[str] = [] try: for path in self.find_candidate_metadata_files(names): candidate = "/".join(path) data = read_file(candidate) if b"Metadata-Version" in data: return data searched_files.append(candidate) finally: archive.close() raise exceptions.InvalidDistribution( "No METADATA in archive or METADATA missing 'Metadata-Version': " "%s (searched %s)" % (fqn, ",".join(searched_files)) ) ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1785167912.502956 twine-7.0.0/twine.egg-info/0000755000175100017510000000000015231700051015124 5ustar00runnerrunner././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/PKG-INFO0000644000175100017510000000673615231700050016234 0ustar00runnerrunnerMetadata-Version: 2.4 Name: twine Version: 7.0.0 Summary: Collection of utilities for publishing packages on PyPI Author-email: Donald Stufft and individual contributors License-Expression: Apache-2.0 Project-URL: Homepage, https://twine.readthedocs.io/ Project-URL: Source, https://github.com/pypa/twine/ Project-URL: Documentation, https://twine.readthedocs.io/en/latest/ Project-URL: Packaging tutorial, https://packaging.python.org/tutorials/packaging-projects/ Classifier: Intended Audience :: Developers Classifier: Natural Language :: English Classifier: Operating System :: MacOS :: MacOS X Classifier: Operating System :: POSIX Classifier: Operating System :: POSIX :: BSD Classifier: Operating System :: POSIX :: Linux Classifier: Operating System :: Microsoft :: Windows Classifier: Programming Language :: Python Classifier: Programming Language :: Python :: 3 Classifier: Programming Language :: Python :: 3 :: Only Classifier: Programming Language :: Python :: 3.10 Classifier: Programming Language :: Python :: 3.11 Classifier: Programming Language :: Python :: 3.12 Classifier: Programming Language :: Python :: 3.13 Classifier: Programming Language :: Python :: 3.14 Classifier: Programming Language :: Python :: Implementation :: CPython Requires-Python: >=3.10 Description-Content-Type: text/x-rst License-File: LICENSE Requires-Dist: readme-renderer>=35.0 Requires-Dist: requests>=2.20 Requires-Dist: requests-toolbelt!=0.9.0,>=0.8.0 Requires-Dist: urllib3>=1.26.0 Requires-Dist: keyring>=21.2.0; platform_machine != "ppc64le" and platform_machine != "s390x" Requires-Dist: rfc3986>=1.4.0 Requires-Dist: rich>=14.3.3 Requires-Dist: packaging>=26.1 Requires-Dist: id Provides-Extra: keyring Requires-Dist: keyring>=21.2.0; extra == "keyring" Dynamic: license-file .. |twine-version| image:: https://img.shields.io/pypi/v/twine.svg :target: https://pypi.org/project/twine .. |python-versions| image:: https://img.shields.io/pypi/pyversions/twine.svg :target: https://pypi.org/project/twine .. |docs-badge| image:: https://img.shields.io/readthedocs/twine :target: https://twine.readthedocs.io .. |build-badge| image:: https://img.shields.io/github/actions/workflow/status/pypa/twine/main.yml?branch=main :target: https://github.com/pypa/twine/actions |twine-version| |python-versions| |docs-badge| |build-badge| twine ===== Twine is a utility for `publishing`_ Python packages on `PyPI`_. It provides build system independent uploads of source and binary `distribution artifacts `_ for both new and existing `projects`_. See our `documentation`_ for a description of features, installation and usage instructions, and links to additional resources. Contributing ------------ See our `developer documentation`_ for how to get started, an architectural overview, and our future development plans. Code of Conduct --------------- Everyone interacting in the Twine project's codebases, issue trackers, chat rooms, and mailing lists is expected to follow the `PSF Code of Conduct`_. .. _`publishing`: https://packaging.python.org/tutorials/packaging-projects/ .. _`PyPI`: https://pypi.org .. _`distributions`: https://packaging.python.org/glossary/#term-Distribution-Package .. _`projects`: https://packaging.python.org/glossary/#term-Project .. _`documentation`: https://twine.readthedocs.io/ .. _`developer documentation`: https://twine.readthedocs.io/en/latest/contributing.html .. _`PSF Code of Conduct`: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/SOURCES.txt0000644000175100017510000000436615231700050017020 0ustar00runnerrunner.coveragerc .flake8 .git-blame-ignore-revs .gitignore .isort.cfg .readthedocs.yaml AUTHORS LICENSE README.rst mypy.ini pyproject.toml pytest.ini tox.ini .github/dependabot.yml .github/ISSUE_TEMPLATE/01_upload_failed.yml .github/ISSUE_TEMPLATE/02_bug.yml .github/ISSUE_TEMPLATE/03_feature.yml .github/ISSUE_TEMPLATE/04_other.yml .github/ISSUE_TEMPLATE/config.yml .github/workflows/codeql-analysis.yml .github/workflows/main.yml .github/workflows/release.yml changelog/.gitignore docs/changelog.rst docs/conf.py docs/contributing.rst docs/index.rst docs/requirements.txt docs/internal/twine.auth.rst docs/internal/twine.cli.rst docs/internal/twine.commands.check.rst docs/internal/twine.commands.register.rst docs/internal/twine.commands.rst docs/internal/twine.commands.upload.rst docs/internal/twine.exceptions.rst docs/internal/twine.package.rst docs/internal/twine.repository.rst docs/internal/twine.rst docs/internal/twine.settings.rst docs/internal/twine.utils.rst docs/internal/twine.wheel.rst tests/__init__.py tests/conftest.py tests/helpers.py tests/test_auth.py tests/test_check.py tests/test_cli.py tests/test_commands.py tests/test_integration.py tests/test_main.py tests/test_package.py tests/test_parse_config_encoding.py tests/test_register.py tests/test_repository.py tests/test_sdist.py tests/test_settings.py tests/test_upload.py tests/test_utils.py tests/test_wheel.py tests/fixtures/deprecated-pypirc tests/fixtures/everything.metadata23 tests/fixtures/everything.metadata24 tests/fixtures/malformed.tar.gz tests/fixtures/twine-1.5.0.tar.gz tests/fixtures/twine-1.6.5.tar.gz tests/fixtures/twine-4.0.2-py3-none-any.whl tests/fixtures/twine-4.0.2-py3-none-any.whl.asc tests/fixtures/twine-6.2.0-py3-none-any.whl twine/__init__.py twine/__main__.py twine/auth.py twine/cli.py twine/distribution.py twine/exceptions.py twine/package.py twine/py.typed twine/repository.py twine/sdist.py twine/settings.py twine/utils.py twine/wheel.py twine.egg-info/PKG-INFO twine.egg-info/SOURCES.txt twine.egg-info/dependency_links.txt twine.egg-info/entry_points.txt twine.egg-info/requires.txt twine.egg-info/scm_file_list.json twine.egg-info/scm_version.json twine.egg-info/top_level.txt twine/commands/__init__.py twine/commands/check.py twine/commands/register.py twine/commands/upload.py././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/dependency_links.txt0000644000175100017510000000000115231700050021171 0ustar00runnerrunner ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/entry_points.txt0000644000175100017510000000027115231700050020421 0ustar00runnerrunner[console_scripts] twine = twine.__main__:main [twine.registered_commands] check = twine.commands.check:main register = twine.commands.register:main upload = twine.commands.upload:main ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/requires.txt0000644000175100017510000000036215231700050017524 0ustar00runnerrunnerreadme-renderer>=35.0 requests>=2.20 requests-toolbelt!=0.9.0,>=0.8.0 urllib3>=1.26.0 rfc3986>=1.4.0 rich>=14.3.3 packaging>=26.1 id [:platform_machine != "ppc64le" and platform_machine != "s390x"] keyring>=21.2.0 [keyring] keyring>=21.2.0 ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/scm_file_list.json0000644000175100017510000000515415231700050020637 0ustar00runnerrunner{ "files": [ "tox.ini", ".git-blame-ignore-revs", "README.rst", "pyproject.toml", ".readthedocs.yaml", "LICENSE", "AUTHORS", "mypy.ini", "pytest.ini", ".flake8", ".gitignore", ".coveragerc", ".isort.cfg", ".github/dependabot.yml", ".github/ISSUE_TEMPLATE/04_other.yml", ".github/ISSUE_TEMPLATE/config.yml", ".github/ISSUE_TEMPLATE/02_bug.yml", ".github/ISSUE_TEMPLATE/03_feature.yml", ".github/ISSUE_TEMPLATE/01_upload_failed.yml", ".github/workflows/main.yml", ".github/workflows/codeql-analysis.yml", ".github/workflows/release.yml", "tests/helpers.py", "tests/test_auth.py", "tests/test_upload.py", "tests/test_settings.py", "tests/test_package.py", "tests/__init__.py", "tests/test_integration.py", "tests/test_wheel.py", "tests/test_register.py", "tests/test_commands.py", "tests/test_main.py", "tests/test_sdist.py", "tests/test_parse_config_encoding.py", "tests/test_cli.py", "tests/test_check.py", "tests/conftest.py", "tests/test_utils.py", "tests/test_repository.py", "tests/fixtures/everything.metadata23", "tests/fixtures/twine-1.5.0.tar.gz", "tests/fixtures/malformed.tar.gz", "tests/fixtures/twine-4.0.2-py3-none-any.whl", "tests/fixtures/twine-1.6.5.tar.gz", "tests/fixtures/deprecated-pypirc", "tests/fixtures/twine-4.0.2-py3-none-any.whl.asc", "tests/fixtures/twine-6.2.0-py3-none-any.whl", "tests/fixtures/everything.metadata24", "twine/wheel.py", "twine/settings.py", "twine/sdist.py", "twine/py.typed", "twine/auth.py", "twine/__init__.py", "twine/package.py", "twine/cli.py", "twine/exceptions.py", "twine/distribution.py", "twine/__main__.py", "twine/repository.py", "twine/utils.py", "twine/commands/__init__.py", "twine/commands/check.py", "twine/commands/register.py", "twine/commands/upload.py", "docs/requirements.txt", "docs/index.rst", "docs/contributing.rst", "docs/conf.py", "docs/changelog.rst", "docs/internal/twine.wheel.rst", "docs/internal/twine.rst", "docs/internal/twine.commands.check.rst", "docs/internal/twine.cli.rst", "docs/internal/twine.commands.register.rst", "docs/internal/twine.exceptions.rst", "docs/internal/twine.settings.rst", "docs/internal/twine.commands.upload.rst", "docs/internal/twine.commands.rst", "docs/internal/twine.repository.rst", "docs/internal/twine.utils.rst", "docs/internal/twine.package.rst", "docs/internal/twine.auth.rst", "changelog/.gitignore" ] } ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/scm_version.json0000644000175100017510000000024015231700050020341 0ustar00runnerrunner{ "tag": "7.0.0", "distance": 0, "node": "gfdb86cb45de11faeece9b274be6da7d275cdd4f9", "dirty": false, "branch": "HEAD", "node_date": "2026-07-27" } ././@PaxHeader0000000000000000000000000000002600000000000010213 xustar0022 mtime=1785167912.0 twine-7.0.0/twine.egg-info/top_level.txt0000644000175100017510000000000615231700050017651 0ustar00runnerrunnertwine