New releases are failing with 403 Forbidden

[jaraco]

Today, I merged skeleton into zipp and uploaded the credentials to the project's secrets:

$ pip-run -q setuptools jaraco.develop -- -m jaraco.develop.add-github-secret PYPI_TOKEN $(keyring get https://upload.pypi.org/legacy/ __token__)

Yet, after tagging a commit, the release stage is failing:

2020-10-15T22:54:54.9137838Z ##[section]Starting: Request a runner to run this job
2020-10-15T22:54:55.0810214Z Can't find any online and idle self-hosted runner in current repository that matches the required labels: 'ubuntu-latest'
2020-10-15T22:54:55.0810338Z Can't find any online and idle self-hosted runner in current repository's account/organization that matches the required labels: 'ubuntu-latest'
2020-10-15T22:54:55.0810845Z Found online and idle hosted runner in current repository's account/organization that matches the required labels: 'ubuntu-latest'
2020-10-15T22:54:55.2241891Z ##[section]Finishing: Request a runner to run this job
2020-10-15T22:55:01.7044986Z Current runner version: '2.273.5'
2020-10-15T22:55:01.7068928Z ##[group]Operating System
2020-10-15T22:55:01.7069588Z Ubuntu
2020-10-15T22:55:01.7069857Z 18.04.5
2020-10-15T22:55:01.7070108Z LTS
2020-10-15T22:55:01.7070408Z ##[endgroup]
2020-10-15T22:55:01.7070743Z ##[group]Virtual Environment
2020-10-15T22:55:01.7071133Z Environment: ubuntu-18.04
2020-10-15T22:55:01.7071495Z Version: 20201012.1
2020-10-15T22:55:01.7072109Z Included Software: https://github.com/actions/virtual-environments/blob/ubuntu18/20201012.1/images/linux/Ubuntu1804-README.md
2020-10-15T22:55:01.7072820Z ##[endgroup]
2020-10-15T22:55:01.7073747Z Prepare workflow directory
2020-10-15T22:55:01.7226928Z Prepare all required actions
2020-10-15T22:55:01.7234967Z Getting action download info
2020-10-15T22:55:01.9636952Z Download action repository 'actions/checkout@v2'
2020-10-15T22:55:03.6987399Z Download action repository 'actions/setup-python@v1'
2020-10-15T22:55:03.9454129Z ##[group]Run actions/checkout@v2
2020-10-15T22:55:03.9454678Z with:
2020-10-15T22:55:03.9455116Z   repository: jaraco/zipp
2020-10-15T22:55:03.9455762Z   token: ***
2020-10-15T22:55:03.9456025Z   ssh-strict: true
2020-10-15T22:55:03.9456357Z   persist-credentials: true
2020-10-15T22:55:03.9456669Z   clean: true
2020-10-15T22:55:03.9456926Z   fetch-depth: 1
2020-10-15T22:55:03.9457182Z   lfs: false
2020-10-15T22:55:03.9457444Z   submodules: false
2020-10-15T22:55:03.9457711Z ##[endgroup]
2020-10-15T22:55:04.7105296Z Syncing repository: jaraco/zipp
2020-10-15T22:55:04.7105897Z ##[group]Getting Git version info
2020-10-15T22:55:04.7106762Z Working directory is '/home/runner/work/zipp/zipp'
2020-10-15T22:55:04.7107166Z [command]/usr/bin/git version
2020-10-15T22:55:04.7107459Z git version 2.28.0
2020-10-15T22:55:04.7108090Z ##[endgroup]
2020-10-15T22:55:04.7108557Z Deleting the contents of '/home/runner/work/zipp/zipp'
2020-10-15T22:55:04.7109383Z ##[group]Initializing the repository
2020-10-15T22:55:04.7109822Z [command]/usr/bin/git init /home/runner/work/zipp/zipp
2020-10-15T22:55:04.7110290Z Initialized empty Git repository in /home/runner/work/zipp/zipp/.git/
2020-10-15T22:55:04.7110843Z [command]/usr/bin/git remote add origin https://github.com/jaraco/zipp
2020-10-15T22:55:04.7111264Z ##[endgroup]
2020-10-15T22:55:04.7111719Z ##[group]Disabling automatic garbage collection
2020-10-15T22:55:04.7112272Z [command]/usr/bin/git config --local gc.auto 0
2020-10-15T22:55:04.7112591Z ##[endgroup]
2020-10-15T22:55:04.7113773Z ##[group]Setting up auth
2020-10-15T22:55:04.7114364Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2020-10-15T22:55:04.7115300Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :
2020-10-15T22:55:04.7116224Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2020-10-15T22:55:04.7117393Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :
2020-10-15T22:55:04.7118564Z [command]/usr/bin/git config --local http.https://github.com/.extraheader AUTHORIZATION: basic ***
2020-10-15T22:55:04.7119124Z ##[endgroup]
2020-10-15T22:55:04.7119436Z ##[group]Fetching the repository
2020-10-15T22:55:04.7120430Z [command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +c74c8a27974bacecf7709d88694ec9f0541fa08d:refs/tags/v3.3.1
2020-10-15T22:55:04.7485949Z remote: Enumerating objects: 29, done.        
2020-10-15T22:55:04.7486386Z remote: Counting objects:   3% (1/29)        
2020-10-15T22:55:04.7486724Z remote: Counting objects:   6% (2/29)        
2020-10-15T22:55:04.7487659Z remote: Counting objects:  10% (3/29)        
2020-10-15T22:55:04.7488042Z remote: Counting objects:  13% (4/29)        
2020-10-15T22:55:04.7488454Z remote: Counting objects:  17% (5/29)        
2020-10-15T22:55:04.7489268Z remote: Counting objects:  20% (6/29)        
2020-10-15T22:55:04.7489604Z remote: Counting objects:  24% (7/29)        
2020-10-15T22:55:04.7490081Z remote: Counting objects:  27% (8/29)        
2020-10-15T22:55:04.7491398Z remote: Counting objects:  31% (9/29)        
2020-10-15T22:55:04.7491735Z remote: Counting objects:  34% (10/29)        
2020-10-15T22:55:04.7492157Z remote: Counting objects:  37% (11/29)        
2020-10-15T22:55:04.7492484Z remote: Counting objects:  41% (12/29)        
2020-10-15T22:55:04.7493859Z remote: Counting objects:  44% (13/29)        
2020-10-15T22:55:04.7494301Z remote: Counting objects:  48% (14/29)        
2020-10-15T22:55:04.7494658Z remote: Counting objects:  51% (15/29)        
2020-10-15T22:55:04.7495067Z remote: Counting objects:  55% (16/29)        
2020-10-15T22:55:04.7495491Z remote: Counting objects:  58% (17/29)        
2020-10-15T22:55:04.7503536Z remote: Counting objects:  62% (18/29)        
2020-10-15T22:55:04.7503977Z remote: Counting objects:  65% (19/29)        
2020-10-15T22:55:04.7504351Z remote: Counting objects:  68% (20/29)        
2020-10-15T22:55:04.7504827Z remote: Counting objects:  72% (21/29)        
2020-10-15T22:55:04.7505199Z remote: Counting objects:  75% (22/29)        
2020-10-15T22:55:04.7505564Z remote: Counting objects:  79% (23/29)        
2020-10-15T22:55:04.7505929Z remote: Counting objects:  82% (24/29)        
2020-10-15T22:55:04.7506292Z remote: Counting objects:  86% (25/29)        
2020-10-15T22:55:04.7506660Z remote: Counting objects:  89% (26/29)        
2020-10-15T22:55:04.7507017Z remote: Counting objects:  93% (27/29)        
2020-10-15T22:55:04.7507382Z remote: Counting objects:  96% (28/29)        
2020-10-15T22:55:04.7507748Z remote: Counting objects: 100% (29/29)        
2020-10-15T22:55:04.7508129Z remote: Counting objects: 100% (29/29), done.        
2020-10-15T22:55:04.7508538Z remote: Compressing objects:   4% (1/25)        
2020-10-15T22:55:04.7508941Z remote: Compressing objects:   8% (2/25)        
2020-10-15T22:55:04.7509348Z remote: Compressing objects:  12% (3/25)        
2020-10-15T22:55:04.7509745Z remote: Compressing objects:  16% (4/25)        
2020-10-15T22:55:04.7510136Z remote: Compressing objects:  20% (5/25)        
2020-10-15T22:55:04.7510534Z remote: Compressing objects:  24% (6/25)        
2020-10-15T22:55:04.7510928Z remote: Compressing objects:  28% (7/25)        
2020-10-15T22:55:04.7511324Z remote: Compressing objects:  32% (8/25)        
2020-10-15T22:55:04.7534827Z remote: Compressing objects:  36% (9/25)        
2020-10-15T22:55:04.7535237Z remote: Compressing objects:  40% (10/25)        
2020-10-15T22:55:04.7535594Z remote: Compressing objects:  44% (11/25)        
2020-10-15T22:55:04.7535948Z remote: Compressing objects:  48% (12/25)        
2020-10-15T22:55:04.7536302Z remote: Compressing objects:  52% (13/25)        
2020-10-15T22:55:04.7536672Z remote: Compressing objects:  56% (14/25)        
2020-10-15T22:55:04.7537024Z remote: Compressing objects:  60% (15/25)        
2020-10-15T22:55:04.7537370Z remote: Compressing objects:  64% (16/25)        
2020-10-15T22:55:04.7537722Z remote: Compressing objects:  68% (17/25)        
2020-10-15T22:55:04.7538075Z remote: Compressing objects:  72% (18/25)        
2020-10-15T22:55:04.7538428Z remote: Compressing objects:  76% (19/25)        
2020-10-15T22:55:04.7538781Z remote: Compressing objects:  80% (20/25)        
2020-10-15T22:55:04.7539133Z remote: Compressing objects:  84% (21/25)        
2020-10-15T22:55:04.7539483Z remote: Compressing objects:  88% (22/25)        
2020-10-15T22:55:04.7539834Z remote: Compressing objects:  92% (23/25)        
2020-10-15T22:55:04.7540186Z remote: Compressing objects:  96% (24/25)        
2020-10-15T22:55:04.7540537Z remote: Compressing objects: 100% (25/25)        
2020-10-15T22:55:04.7540900Z remote: Compressing objects: 100% (25/25), done.        
2020-10-15T22:55:04.7545961Z remote: Total 29 (delta 0), reused 13 (delta 0), pack-reused 0        
2020-10-15T22:55:04.7703879Z From https://github.com/jaraco/zipp
2020-10-15T22:55:04.7705130Z  * [new ref]         c74c8a27974bacecf7709d88694ec9f0541fa08d -> v3.3.1
2020-10-15T22:55:04.7725835Z ##[endgroup]
2020-10-15T22:55:04.7726216Z ##[group]Determining the checkout info
2020-10-15T22:55:04.7727880Z ##[endgroup]
2020-10-15T22:55:04.7728199Z ##[group]Checking out the ref
2020-10-15T22:55:04.7732727Z [command]/usr/bin/git checkout --progress --force refs/tags/v3.3.1
2020-10-15T22:55:04.8094212Z Note: switching to 'refs/tags/v3.3.1'.
2020-10-15T22:55:04.8112714Z 
2020-10-15T22:55:04.8114330Z You are in 'detached HEAD' state. You can look around, make experimental
2020-10-15T22:55:04.8115165Z changes and commit them, and you can discard any commits you make in this
2020-10-15T22:55:04.8115951Z state without impacting any branches by switching back to a branch.
2020-10-15T22:55:04.8116462Z 
2020-10-15T22:55:04.8117368Z If you want to create a new branch to retain commits you create, you may
2020-10-15T22:55:04.8118366Z do so (now or later) by using -c with the switch command. Example:
2020-10-15T22:55:04.8119296Z 
2020-10-15T22:55:04.8119994Z   git switch -c <new-branch-name>
2020-10-15T22:55:04.8120422Z 
2020-10-15T22:55:04.8120908Z Or undo this operation with:
2020-10-15T22:55:04.8121279Z 
2020-10-15T22:55:04.8122917Z   git switch -
2020-10-15T22:55:04.8123412Z 
2020-10-15T22:55:04.8123951Z Turn off this advice by setting config variable advice.detachedHead to false
2020-10-15T22:55:04.8124412Z 
2020-10-15T22:55:04.8124785Z HEAD is now at c74c8a2 Update changelog.
2020-10-15T22:55:04.8125348Z ##[endgroup]
2020-10-15T22:55:04.8161393Z [command]/usr/bin/git log -1 --format='%H'
2020-10-15T22:55:04.8199790Z 'c74c8a27974bacecf7709d88694ec9f0541fa08d'
2020-10-15T22:55:04.8364290Z ##[group]Run actions/setup-python@v1
2020-10-15T22:55:04.8364655Z with:
2020-10-15T22:55:04.8364958Z   python-version: 3.8
2020-10-15T22:55:04.8365295Z   architecture: x64
2020-10-15T22:55:04.8365599Z ##[endgroup]
2020-10-15T22:55:04.8826160Z Successfully setup CPython (3.8.6)
2020-10-15T22:55:04.8907679Z ##[group]Run python -m pip install tox
2020-10-15T22:55:04.8908132Z �[36;1mpython -m pip install tox�[0m
2020-10-15T22:55:04.8950302Z shell: /bin/bash -e {0}
2020-10-15T22:55:04.8950602Z env:
2020-10-15T22:55:04.8951008Z   pythonLocation: /opt/hostedtoolcache/Python/3.8.6/x64
2020-10-15T22:55:04.8951422Z ##[endgroup]
2020-10-15T22:55:07.8989944Z Collecting tox
2020-10-15T22:55:07.9626270Z   Downloading tox-3.20.1-py2.py3-none-any.whl (83 kB)
2020-10-15T22:55:08.0332922Z Collecting toml>=0.9.4
2020-10-15T22:55:08.0468645Z   Downloading toml-0.10.1-py2.py3-none-any.whl (19 kB)
2020-10-15T22:55:08.0993535Z Collecting py>=1.4.17
2020-10-15T22:55:08.1058533Z   Downloading py-1.9.0-py2.py3-none-any.whl (99 kB)
2020-10-15T22:55:08.1469024Z Collecting pluggy>=0.12.0
2020-10-15T22:55:08.1612177Z   Downloading pluggy-0.13.1-py2.py3-none-any.whl (18 kB)
2020-10-15T22:55:08.3149876Z Collecting virtualenv!=20.0.0,!=20.0.1,!=20.0.2,!=20.0.3,!=20.0.4,!=20.0.5,!=20.0.6,!=20.0.7,>=16.0.0
2020-10-15T22:55:08.3353235Z   Downloading virtualenv-20.0.35-py2.py3-none-any.whl (4.9 MB)
2020-10-15T22:55:08.5606735Z Collecting filelock>=3.0.0
2020-10-15T22:55:08.5739970Z   Downloading filelock-3.0.12-py3-none-any.whl (7.6 kB)
2020-10-15T22:55:08.6167452Z Collecting packaging>=14
2020-10-15T22:55:08.6317182Z   Downloading packaging-20.4-py2.py3-none-any.whl (37 kB)
2020-10-15T22:55:08.6611963Z Collecting six>=1.14.0
2020-10-15T22:55:08.6752049Z   Downloading six-1.15.0-py2.py3-none-any.whl (10 kB)
2020-10-15T22:55:08.6948055Z Collecting appdirs<2,>=1.4.3
2020-10-15T22:55:08.7088138Z   Downloading appdirs-1.4.4-py2.py3-none-any.whl (9.6 kB)
2020-10-15T22:55:08.7316669Z Collecting distlib<1,>=0.3.1
2020-10-15T22:55:08.7472981Z   Downloading distlib-0.3.1-py2.py3-none-any.whl (335 kB)
2020-10-15T22:55:08.8167671Z Collecting pyparsing>=2.0.2
2020-10-15T22:55:08.8312158Z   Downloading pyparsing-2.4.7-py2.py3-none-any.whl (67 kB)
2020-10-15T22:55:08.9170030Z Installing collected packages: toml, py, pluggy, appdirs, distlib, six, filelock, virtualenv, pyparsing, packaging, tox
2020-10-15T22:55:09.3692658Z Successfully installed appdirs-1.4.4 distlib-0.3.1 filelock-3.0.12 packaging-20.4 pluggy-0.13.1 py-1.9.0 pyparsing-2.4.7 six-1.15.0 toml-0.10.1 tox-3.20.1 virtualenv-20.0.35
2020-10-15T22:55:09.5137581Z ##[group]Run tox -e release
2020-10-15T22:55:09.5137915Z �[36;1mtox -e release�[0m
2020-10-15T22:55:09.5174363Z shell: /bin/bash -e {0}
2020-10-15T22:55:09.5174588Z env:
2020-10-15T22:55:09.5174923Z   pythonLocation: /opt/hostedtoolcache/Python/3.8.6/x64
2020-10-15T22:55:09.5181573Z   TWINE_PASSWORD: ***

2020-10-15T22:55:09.5182386Z   GITHUB_TOKEN: ***
2020-10-15T22:55:09.5182619Z ##[endgroup]
2020-10-15T22:55:09.7794916Z release create: /home/runner/work/zipp/zipp/.tox/release
2020-10-15T22:55:10.4364456Z release installdeps: pep517>=0.5, twine[keyring]>=1.13, path, jaraco.develop>=7.1
2020-10-15T22:55:17.8999374Z release installed: autocommand==2.2.1,bleach==3.2.1,certifi==2020.6.20,cffi==1.14.3,chardet==3.0.4,colorama==0.4.4,cryptography==3.1.1,docutils==0.16,idna==2.10,jaraco.classes==3.1.0,jaraco.develop==7.2.2,jaraco.functools==3.0.1,jaraco.text==3.2.0,jaraco.ui==2.0.1,jeepney==0.4.3,keyring==21.4.0,more-itertools==8.5.0,munch==2.5.0,packaging==20.4,path==15.0.0,pep517==0.8.2,pkginfo==1.5.0.1,pycparser==2.20,Pygments==2.7.1,PyNaCl==1.4.0,pyparsing==2.4.7,readme-renderer==27.0,requests==2.24.0,requests-toolbelt==0.9.1,rfc3986==1.4.0,SecretStorage==3.1.2,six==1.15.0,toml==0.10.1,tqdm==4.50.2,twine==3.2.0,urllib3==1.25.10,webencodings==0.5.1
2020-10-15T22:55:17.9003394Z release run-test-pre: PYTHONHASHSEED='3787827039'
2020-10-15T22:55:17.9007371Z release run-test: commands[0] | python -c 'import path; path.Path('"'"'dist'"'"').rmtree_p()'
2020-10-15T22:55:17.9335754Z release run-test: commands[1] | python -m pep517.build .
2020-10-15T22:55:21.6391783Z running sdist
2020-10-15T22:55:21.6428876Z running egg_info
2020-10-15T22:55:21.6458463Z creating zipp.egg-info
2020-10-15T22:55:21.6459270Z writing zipp.egg-info/PKG-INFO
2020-10-15T22:55:21.6475673Z writing dependency_links to zipp.egg-info/dependency_links.txt
2020-10-15T22:55:21.6476522Z writing requirements to zipp.egg-info/requires.txt
2020-10-15T22:55:21.6477200Z writing top-level names to zipp.egg-info/top_level.txt
2020-10-15T22:55:21.6477883Z writing manifest file 'zipp.egg-info/SOURCES.txt'
2020-10-15T22:55:21.9706411Z writing manifest file 'zipp.egg-info/SOURCES.txt'
2020-10-15T22:55:21.9720167Z running check
2020-10-15T22:55:22.0774734Z creating zipp-3.3.1
2020-10-15T22:55:22.0777045Z creating zipp-3.3.1/.github
2020-10-15T22:55:22.0780190Z creating zipp-3.3.1/.github/workflows
2020-10-15T22:55:22.0782437Z creating zipp-3.3.1/docs
2020-10-15T22:55:22.0784684Z creating zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0786102Z copying files to zipp-3.3.1...
2020-10-15T22:55:22.0788414Z copying .coveragerc -> zipp-3.3.1
2020-10-15T22:55:22.0790723Z copying .flake8 -> zipp-3.3.1
2020-10-15T22:55:22.0793961Z copying .pre-commit-config.yaml -> zipp-3.3.1
2020-10-15T22:55:22.0822802Z copying .readthedocs.yml -> zipp-3.3.1
2020-10-15T22:55:22.0823537Z copying .travis.yml -> zipp-3.3.1
2020-10-15T22:55:22.0824099Z copying CHANGES.rst -> zipp-3.3.1
2020-10-15T22:55:22.0824639Z copying LICENSE -> zipp-3.3.1
2020-10-15T22:55:22.0825231Z copying README.rst -> zipp-3.3.1
2020-10-15T22:55:22.0825801Z copying appveyor.yml -> zipp-3.3.1
2020-10-15T22:55:22.0826448Z copying azure-pipelines.yml -> zipp-3.3.1
2020-10-15T22:55:22.0827076Z copying conftest.py -> zipp-3.3.1
2020-10-15T22:55:22.0827596Z copying mypy.ini -> zipp-3.3.1
2020-10-15T22:55:22.0828164Z copying pyproject.toml -> zipp-3.3.1
2020-10-15T22:55:22.0828741Z copying pytest.ini -> zipp-3.3.1
2020-10-15T22:55:22.0829277Z copying setup.cfg -> zipp-3.3.1
2020-10-15T22:55:22.0829802Z copying setup.py -> zipp-3.3.1
2020-10-15T22:55:22.0830340Z copying skeleton.md -> zipp-3.3.1
2020-10-15T22:55:22.0830887Z copying test_zipp.py -> zipp-3.3.1
2020-10-15T22:55:22.0831405Z copying tox.ini -> zipp-3.3.1
2020-10-15T22:55:22.0841383Z copying zipp.py -> zipp-3.3.1
2020-10-15T22:55:22.0842271Z copying .github/workflows/main.yml -> zipp-3.3.1/.github/workflows
2020-10-15T22:55:22.0842960Z copying docs/conf.py -> zipp-3.3.1/docs
2020-10-15T22:55:22.0843564Z copying docs/history.rst -> zipp-3.3.1/docs
2020-10-15T22:55:22.0844367Z copying docs/index.rst -> zipp-3.3.1/docs
2020-10-15T22:55:22.0845098Z copying zipp.egg-info/PKG-INFO -> zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0845905Z copying zipp.egg-info/SOURCES.txt -> zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0846776Z copying zipp.egg-info/dependency_links.txt -> zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0847622Z copying zipp.egg-info/requires.txt -> zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0848449Z copying zipp.egg-info/top_level.txt -> zipp-3.3.1/zipp.egg-info
2020-10-15T22:55:22.0849099Z Writing zipp-3.3.1/setup.cfg
2020-10-15T22:55:22.0849468Z Creating tar archive
2020-10-15T22:55:22.0926553Z removing 'zipp-3.3.1' (and everything under it)
2020-10-15T22:55:22.0938455Z /tmp/pep517-build-env-98rs2k2w/lib/python3.8/site-packages/setuptools_scm/git.py:68: UserWarning: "/home/runner/work/zipp/zipp" is shallow and may cause errors
2020-10-15T22:55:22.0939392Z   warnings.warn('"{}" is shallow and may cause errors'.format(wd.path))
2020-10-15T22:55:25.6188828Z running bdist_wheel
2020-10-15T22:55:25.6463722Z running build
2020-10-15T22:55:25.6464619Z running build_py
2020-10-15T22:55:25.6590173Z creating build
2020-10-15T22:55:25.6591452Z creating build/lib
2020-10-15T22:55:25.6597721Z copying zipp.py -> build/lib
2020-10-15T22:55:25.6598437Z running egg_info
2020-10-15T22:55:25.6625666Z writing zipp.egg-info/PKG-INFO
2020-10-15T22:55:25.6629001Z writing dependency_links to zipp.egg-info/dependency_links.txt
2020-10-15T22:55:25.6630623Z writing requirements to zipp.egg-info/requires.txt
2020-10-15T22:55:25.6631734Z writing top-level names to zipp.egg-info/top_level.txt
2020-10-15T22:55:25.6758868Z writing manifest file 'zipp.egg-info/SOURCES.txt'
2020-10-15T22:55:25.6770283Z installing to build/bdist.linux-x86_64/wheel
2020-10-15T22:55:25.6771053Z running install
2020-10-15T22:55:25.6772957Z running install_lib
2020-10-15T22:55:25.6807298Z creating build/bdist.linux-x86_64
2020-10-15T22:55:25.6808432Z creating build/bdist.linux-x86_64/wheel
2020-10-15T22:55:25.6809296Z copying build/lib/zipp.py -> build/bdist.linux-x86_64/wheel
2020-10-15T22:55:25.6809918Z running install_egg_info
2020-10-15T22:55:25.6817453Z Copying zipp.egg-info to build/bdist.linux-x86_64/wheel/zipp-3.3.1-py3.8.egg-info
2020-10-15T22:55:25.6823493Z running install_scripts
2020-10-15T22:55:25.7182500Z creating build/bdist.linux-x86_64/wheel/zipp-3.3.1.dist-info/WHEEL
2020-10-15T22:55:25.7184700Z creating '/tmp/tmpxwj26gid/tmph1njj08d/zipp-3.3.1-py3-none-any.whl' and adding 'build/bdist.linux-x86_64/wheel' to it
2020-10-15T22:55:25.7189519Z adding 'zipp.py'
2020-10-15T22:55:25.7193570Z adding 'zipp-3.3.1.dist-info/LICENSE'
2020-10-15T22:55:25.7195429Z adding 'zipp-3.3.1.dist-info/METADATA'
2020-10-15T22:55:25.7196457Z adding 'zipp-3.3.1.dist-info/WHEEL'
2020-10-15T22:55:25.7198162Z adding 'zipp-3.3.1.dist-info/top_level.txt'
2020-10-15T22:55:25.7199362Z adding 'zipp-3.3.1.dist-info/RECORD'
2020-10-15T22:55:25.7200168Z removing build/bdist.linux-x86_64/wheel
2020-10-15T22:55:25.7205740Z /tmp/pep517-build-env-ktd_2gux/lib/python3.8/site-packages/setuptools_scm/git.py:68: UserWarning: "/home/runner/work/zipp/zipp" is shallow and may cause errors
2020-10-15T22:55:25.7207038Z   warnings.warn('"{}" is shallow and may cause errors'.format(wd.path))
2020-10-15T22:55:25.7636258Z release run-test: commands[2] | python -m twine upload 'dist/*'
2020-10-15T22:55:26.2724545Z Uploading distributions to https://upload.pypi.org/legacy/
2020-10-15T22:55:26.2726567Z Uploading zipp-3.3.1-py3-none-any.whl
2020-10-15T22:55:26.2726856Z 
2020-10-15T22:55:26.4194856Z   0%|          | 0.00/11.3k [00:00<?, ?B/s]
2020-10-15T22:55:26.4209529Z 100%|██████████| 11.3k/11.3k [00:00<00:00, 78.8kB/s]HTTPError: 403 Forbidden from https://upload.pypi.org/legacy/
2020-10-15T22:55:26.4221058Z Invalid or non-existent authentication information. See https://pypi.org/help/#invalid-auth for more information.
2020-10-15T22:55:26.4221731Z 
2020-10-15T22:55:26.4222241Z NOTE: Try --verbose to see response content.
2020-10-15T22:55:26.4523569Z ERROR: InvocationError for command /home/runner/work/zipp/zipp/.tox/release/bin/python -m twine upload 'dist/*' (exited with code 1)
2020-10-15T22:55:26.4527433Z ___________________________________ summary ____________________________________
2020-10-15T22:55:26.4527818Z ERROR:   release: commands failed
2020-10-15T22:55:26.4709683Z ##[error]Process completed with exit code 1.
2020-10-15T22:55:26.4773393Z Post job cleanup.
2020-10-15T22:55:26.5665641Z [command]/usr/bin/git version
2020-10-15T22:55:26.5722501Z git version 2.28.0
2020-10-15T22:55:26.5752760Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2020-10-15T22:55:26.5791469Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :
2020-10-15T22:55:26.6040452Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2020-10-15T22:55:26.6076062Z http.https://github.com/.extraheader
2020-10-15T22:55:26.6085538Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader
2020-10-15T22:55:26.6123016Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :
2020-10-15T22:55:26.6407471Z Cleaning up orphan processes

[jaraco]

So the token is set (presumably correctly, as I used the same token as I've always used). Twine hasn't changed. I have no idea what's wrong :(

[jaraco]

As suggested, I tried adding the --verbose flag, but it didn't provide any useful information:

Content received from server:
<html>
 <head>
  <title>403 Invalid or non-existent authentication information. See https://pypi.org/help/#invalid-auth for more information.</title>
 </head>
 <body>
  <h1>403 Invalid or non-existent authentication information. See https://pypi.org/help/#invalid-auth for more information.</h1>
  Access was denied to this resource.<br/><br/>
Invalid or non-existent authentication information. See https://pypi.org/help/#invalid-auth for more information.


 </body>
</html>
ERROR: InvocationError for command /home/runner/work/zipp/zipp/.tox/release/bin/python -m twine upload --verbose 'dist/*' (exited with code 1)

[jaraco]

I'm now suspecting the add-github-secret command is getting a trailing newline in that parameter.

[jaraco]

To test that theory, I'm retrying the release job after having run:

$ pip-run -q setuptools jaraco.develop -- -m jaraco.develop.add-github-secret PYPI_TOKEN @($(keyring get https://upload.pypi.org/legacy/ __token__).strip())

[jaraco]

That worked! So the issue is trailing whitespace leaking from the keyring command.

[jaraco]

jaraco.develop 7.3.0 adds a add-github-secrets command that installs all secrets needed by workflows.