ci: pin twine<6 — classic ~/.pypirc auth on build runner

twine 6 (Sep 2025) auto-detects GitLab CI and refuses to fall back to
~/.pypirc, requiring PYPI_ID_TOKEN (Trusted Publishing OIDC). Pin <6
to keep the runner's ~/.pypirc fallback working until we migrate all
python/* repos to Trusted Publishing as a coordinated change.
This commit is contained in:
russell@unturf.com 2026-06-16 14:11:59 -04:00
parent cd11eefb38
commit 753642c70f
No known key found for this signature in database

View file

@ -65,7 +65,11 @@ pypi-twine:
- python3 -m venv twine_env
- source twine_env/bin/activate
- pip install --upgrade pip
- pip install twine build
# Pin twine <6 — newer twine auto-detects GitLab CI and refuses to
# fall back to ~/.pypirc on the runner, requiring PYPI_ID_TOKEN
# (Trusted Publishing OIDC). Until we migrate to Trusted Publishing,
# stick with the classic ~/.pypirc auth on the build runner.
- pip install "twine<6" build
- python3 -m build
- twine check dist/*
- twine upload --non-interactive dist/*