Document broken pkginfo==1.9.0 transitive dep

Refs: * #107
pypa · Nov 30, 2022 · 0b69a8c · 0b69a8c
1 parent c54db9c
commit 0b69a8c
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/requirements/runtime.in b/requirements/runtime.in
@@ -1 +1,11 @@
 twine
+
+# NOTE: `pkginfo` is a transitive dependency for us that is coming from Twine.
+# NOTE: It is declared here only to avoid installing a broken combination of
+# NOTE: the distribution packages. This should be removed once a fixed version
+# NOTE: of Twine is out.
+# Refs:
+# * https://github.com/pypa/gh-action-pypi-publish/issues/107
+# * https://github.com/pypa/twine/issues/940
+# * https://github.com/pypa/twine/pull/941
+pkginfo != 1.9.0
diff --git a/requirements/runtime.txt b/requirements/runtime.txt
@@ -35,7 +35,9 @@ keyring==23.11.0
 more-itertools==9.0.0
     # via jaraco-classes
 pkginfo==1.9.2
-    # via twine
+    # via
+    #   -r requirements/runtime.in
+    #   twine
 pycparser==2.21
     # via cffi
 pygments==2.13.0