Skip to content

Commit

Permalink
Eliminate future tense in the password nudge in twine-upload
Browse files Browse the repository at this point in the history
Additionally, this turns the corresponding code branch into a hard error in case of the regular PyPI.

Signed-off-by: William Woodruff <[email protected]>

PR #234
Fixes #233
  • Loading branch information
woodruffw authored May 16, 2024
1 parent 04f4e64 commit 771d60f
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions twine-upload.sh
Original file line number Diff line number Diff line change
Expand Up @@ -40,9 +40,9 @@ INPUT_VERIFY_METADATA="$(get-normalized-input 'verify-metadata')"
INPUT_SKIP_EXISTING="$(get-normalized-input 'skip-existing')"
INPUT_PRINT_HASH="$(get-normalized-input 'print-hash')"

PASSWORD_DEPRECATION_NUDGE="::error title=Password-based uploads deprecated::\
Starting in 2024, PyPI will require all users to enable Two-Factor \
Authentication. This will consequently require all users to switch \
PASSWORD_DEPRECATION_NUDGE="::error title=Password-based uploads disabled::\
As of 2024, PyPI requires all users to enable Two-Factor \
Authentication. This consequently requires all users to switch \
to either Trusted Publishers (preferred) or API tokens for package \
uploads. Read more: \
https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2fa/"
Expand Down Expand Up @@ -74,6 +74,7 @@ else
if [[ "${INPUT_REPOSITORY_URL}" =~ pypi\.org ]]; then
echo "${PASSWORD_DEPRECATION_NUDGE}"
echo "${TRUSTED_PUBLISHING_NUDGE}"
exit 1
fi
fi

Expand Down

0 comments on commit 771d60f

Please sign in to comment.