Document broken pkginfo==1.9.0 transitive dep

Refs:
* #107

Author: webknjaz

requirements/runtime.in

@@ -1 +1,11 @@
 twine
+
+# NOTE: `pkginfo` is a transitive dependency for us that is coming from Twine.
+# NOTE: It is declared here only to avoid installing a broken combination of
+# NOTE: the distribution packages. This should be removed once a fixed version
+# NOTE: of Twine is out.
+# Refs:
+# * https://github.com/pypa/gh-action-pypi-publish/issues/107
+# * https://github.com/pypa/twine/issues/940
+# * https://github.com/pypa/twine/pull/941
+pkginfo != 1.9.0

requirements/runtime.txt

@@ -35,7 +35,9 @@ keyring==23.11.0
 more-itertools==9.0.0
     # via jaraco-classes
 pkginfo==1.9.2
-    # via twine
+    # via
+    #   -r requirements/runtime.in
+    #   twine
 pycparser==2.21
     # via cffi
 pygments==2.13.0