📦 Only keep lower bounds @ input requirements

This concerns both direct (`twine`) and indirect (`pkginfo`) deps, provided there's no broken versions to exclude.
pypa · Dec 9, 2024 · 67339c7 · 67339c7
1 parent cbd6d01
commit 67339c7
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/requirements/runtime-constraints.in b/requirements/runtime-constraints.in
@@ -17,4 +17,4 @@
 # NOTE: 1.12.0 and later enable support for metadata 2.4
 # NOTE: This can be dropped once twine stops using pkginfo
 # Ref: https://github.com/pypa/twine/pull/1180
-pkginfo ~= 1.12.0
+pkginfo >= 1.12.0
diff --git a/requirements/runtime.in b/requirements/runtime.in
@@ -1,6 +1,7 @@
 -c runtime-constraints.in  # limits known broken versions
 
-twine ~= 6.0
+# NOTE: v6 is needed to support metadata v2.4
+twine >= 6.0
 
 # NOTE: Used to detect an ambient OIDC credential for OIDC publishing,
 # NOTE: as well as PEP 740 attestations.