Merge branch 'main' into warsaw/12708-programmatic-yanking

.github/workflows/node-ci.yml

@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.3.0
+          node-version: 23.1.0
           cache: 'npm'
       - name: Install Node dependencies
         run: npm ci

Dockerfile

@@ -1,6 +1,6 @@
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:22.9.0-bookworm AS static-deps
+FROM node:23.1.0-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

docs/dev/development/patterns.rst

@@ -133,6 +133,8 @@ Adding a new service
 3. (Optional) Create other implementations of the interface. For instance, many services in ``warehouse``
    also provide a ``NullService`` version used for development. These Null implementations only
    provide basic functionalities without verifications and reduce the need for stubs in tests.
+   When implementing a warning for using the service, subclass the exception from
+   ``warehouse.utils.exceptions.DevelopmentModeWarning`` to minimize warnings in the test logs.
 
    Any new implementation must implement the complete interface, including all its methods and attributes.
 

docs/user/project_metadata.md

@@ -26,7 +26,7 @@ PyPI currently supports several ways of verifying project URLs. When a URL is ve
 
 !!! warning
 
-    An URL being verified only attests that the URL is under control of the
+    A URL being verified only attests that the URL is under control of the
     PyPI package owner at the time of verification, and does not imply any
     additional safety about that URL or any other relationship to the project
     in question.
@@ -102,7 +102,7 @@ will be recognized.
 | Homepage         | :fontawesome-solid-house-chimney:         | For the project homepage  |                                                                                                          |
 | Download         | :fontawesome-solid-cloud:                 | A download link           |                                                                                                          |
 | Changelog        | :fontawesome-solid-scroll:                | Changelog information     | Change log, Changes, Release notes, News, What's new, History                                            |
-| Documentation^*^ | :fontawesome-solid-book:                  | Project documentation     | Docs^*^ , an URL pointing to [Read the Docs] domains or an URL starting with `docs.` or `documentation.` |
+| Documentation^*^ | :fontawesome-solid-book:                  | Project documentation     | Docs^*^ , a URL pointing to [Read the Docs] domains or a URL starting with `docs.` or `documentation.` |
 | Bug^*^           | :fontawesome-solid-bug:                   | Bug/Issue report location | Issue^*^, Tracker^*^, Report^*^                                                                          |
 | Funding^*^       | :fontawesome-solid-circle-dollar-to-slot: | Sponsoring information    | Sponsor^*^, Donation^*^, Donate^*^                                                                       |
 

pyproject.toml

@@ -50,18 +50,15 @@ cache_dir = "dev/.mypy_cache"
 [[tool.mypy.overrides]]
 # These modules do not yet have types available.
 module = [
-    "alembic_postgresql_enum.*",
-    "automat.*",
     "bpython.*",  # https://github.com/bpython/bpython/issues/892
     "b2sdk.*",  # https://github.com/Backblaze/b2-sdk-python/issues/148
     "celery.app.backends.*",
     "celery.backends.redis.*",
-    "github_reserved_names.*",
+    "github_reserved_names.*",  # https://github.com/Julian/github-reserved-names/pull/10
     "google.cloud.*",
     "forcediphttpsadapter.*",
     "IPython.*",  # has types, but only installed in dev
-    "linehaul.*",
-    "packaging_legacy.*",
+    "packaging_legacy.*",  # https://github.com/di/packaging_legacy/pull/5
     "paginate.*",
     "paginate_sqlalchemy.*",
     "premailer.*",
@@ -73,11 +70,11 @@ module = [
     "pyramid_rpc.*",
     "pyqrcode.*",
     "requests_aws4auth.*",  # https://github.com/tedder/requests-aws4auth/issues/53
-    "rfc3986.*",
+    "rfc3986.*",  # https://github.com/python-hyper/rfc3986/issues/122
     "transaction.*",
     "ua_parser.*",  # https://github.com/ua-parser/uap-python/issues/110
     "venusian.*",
-    "whitenoise.*",
+    "whitenoise.*",  # https://github.com/evansd/whitenoise/pull/410
     "zope.sqlalchemy.*",
 ]
 ignore_missing_imports = true
@@ -96,9 +93,7 @@ markers = [
     'functional: Slower running tests which test the entire system is functioning.',
 ]
 filterwarnings = [
-    'ignore::warehouse.admin.services.InsecureStorageWarning',
-    'ignore::warehouse.utils.exceptions.InsecureOIDCPublisherWarning',
-    'ignore::warehouse.packaging.services.InsecureStorageWarning',
+    'ignore::warehouse.utils.exceptions.DevelopmentModeWarning',
     'error:SELECT statement has a cartesian product:sqlalchemy.exc.SAWarning',
 ]
 

requirements/deploy.in

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==2.14.2
+ddtrace==2.14.4

requirements/deploy.txt

@@ -8,75 +8,75 @@ bytecode==0.15.1 \
     --hash=sha256:0a1dc340cac823cff605609b8b214f7f9bf80418c6b9e0fc8c6db1793c27137d \
     --hash=sha256:7263239a8d3f70fc7c303862b20cd2c6788052e37ce0a26e67309d280e985984
     # via ddtrace
-ddtrace==2.14.2 \
-    --hash=sha256:008acbb98e7ab329a13b91e5e8e91574d11628d009bd39c4dda921c8ebae59f9 \
-    --hash=sha256:043e95f0828421cb3337ec7c8111077525562d147dd2409b62972611678c121a \
-    --hash=sha256:04441b33ac73e4d44594d0c611703ea6292afa6ef0d1fdc5bff9265027b1a507 \
-    --hash=sha256:0e38ef8223f8d908a88bd684c3c172cf6744ef7168261fdd64b15ab143cd9226 \
-    --hash=sha256:0f195a2d0d1fd1fda50218135338c40796df48be184006d5211d14934461db78 \
-    --hash=sha256:113b0c808ff8d19a9b13890b255c8772c568958ca4bc7951ac2cfd8495e538e2 \
-    --hash=sha256:12a0a1f8f26e213f3065816b0c17f2c0bd0cc1cd947c8be51b8e2051a7a5e205 \
-    --hash=sha256:14efbcdab52f429d2381ddbd15ea3555b256f0e3fcf4668551f1de5ee4059389 \
-    --hash=sha256:15b160e4599be9d9a73ccc814104a2e92b5ad79f76803abe890ddd128379e06f \
-    --hash=sha256:1a5339494ad67759ea67e96e0bc9761a577d2f2e851cb17cbbb55a8ad6fd9f6e \
-    --hash=sha256:1ad29345ebbc95b3956e1f5faf436f058b2a4a7940cd597cb2370a596657cd46 \
-    --hash=sha256:1b49108959a60a796bc559c30ad7b5c4238f4e412c06e451ce7e458f3736f749 \
-    --hash=sha256:1cb7587446fb2b535f2ffe6e669085c6dbd3c960358d9a6e0d720f9f96397f03 \
-    --hash=sha256:1f275801947abf966ed7503251db82f69c3ade7656369ac83811801d5007626d \
-    --hash=sha256:1f926322696edd66bd20520f759bbb913c79f36fa790b44ce6ed630efe7af342 \
-    --hash=sha256:2630bca186e629ec55ca86f87bb2ba2bc74bc81c166717e3791e1f8b927e45f4 \
-    --hash=sha256:279c9018ad6d0ff9dcadc19713a3ed4086047cd2d541e895e95ef39ac6b2039e \
-    --hash=sha256:27a26ef79507e0c8fd539d62d17bc9fb89f43cca3eeffc0fc73d0afa42668c8e \
-    --hash=sha256:27dc2c6d603e3ba54ed16e180a3d422c4cbe0e66b51c084a0554d41305423f4a \
-    --hash=sha256:299a864649af8cc518462544bd352755ec6338a084142e96541d86d8b29197c9 \
-    --hash=sha256:2b3a0489233f4217d3a5d5bd9711f79179883f67a107fda3123bc4ef1c5eb68e \
-    --hash=sha256:2b3d9d84ecd29a9cfcbe37d785607386213e42c1f8284b657594e7bf663de636 \
-    --hash=sha256:2f5f8190033ba79ea88563c1748c171e54d4c11dbfb7f6f7ce0e31e5d781e7c1 \
-    --hash=sha256:30ef0cc037f173bbe2f899e605c85ed42411a878779183c7bedb05a84721210b \
-    --hash=sha256:3624696119ac7e111d70e3122f9a5d8824ec72965da43082b74d38bdadffc8f0 \
-    --hash=sha256:38d9535431dcd5fa73274e10b3ebadff8a3de1b8fc9bb992c8f751ccdbd4b462 \
-    --hash=sha256:38db944de702d3a228d012a32ec4fc864719afd22e380caf90c0099ea5fe5de8 \
-    --hash=sha256:39e60df43a2c344be13f4bd8c16b0c88725a446e306e900bd0c8b7f60b4489f1 \
-    --hash=sha256:3a76aaaffc3ec543eee3d4de02e82d040a7ee849759004f7615d7d0903b7e692 \
-    --hash=sha256:418a869e73ac1bf8747410edd257ed1eb48d0c40e8b3e6ee19a1c5c2dc0261ad \
-    --hash=sha256:59a5b4ce593c9f3c5440401550e385d6822b8984903958918fe430f1747da9f5 \
-    --hash=sha256:5d0eeb15fb47fb4dc34ac97302ac4d46b52cc62a2db57129af5876a9afb66d28 \
-    --hash=sha256:637cb306aa49da6d1053a3b46a410735a513d7a6d2c74f00747fef3e66300a6f \
-    --hash=sha256:64b140ef34e882daabeb0b46fea2b206f81c54f80f1911e7070956968ff52bfc \
-    --hash=sha256:68c905e9bd4d4b211b8186bec994afb34c6f676a6386626fa5a4faab9c4e90f2 \
-    --hash=sha256:69fa0d98bcf8a557b2f01b48bc96604eb08b41aa63bf80bab75420801d244d59 \
-    --hash=sha256:6aa8280c31c0225d97eb402ef92e867d415b4e38d0e5e3a6ee48ac340f098d42 \
-    --hash=sha256:6dd9aaebfefa9a05bf798d8262ff92edf6223ae6a459cd5403102c626e3f2699 \
-    --hash=sha256:6f441db24141c673554fd83211522ed5590e3325172ffd3de46e0d711990828c \
-    --hash=sha256:70f48caeda7d6695738b9b70c816d610c34518510a1fe7a784df11853b1a4589 \
-    --hash=sha256:79f35c6d8f49930de100150fd489998ea793f118414bcda85e6bc659a85fd1a6 \
-    --hash=sha256:7d49367c9c26309bac5d2be88fe99b13071bcbed11bfd953e26382504efe1aab \
-    --hash=sha256:7e46c0aa4fe3451867acfa9180bd79b913cf4412d7e028eb84df6b3cd1305ea6 \
-    --hash=sha256:863fdf0b6fecda140b0d9bae45c5459ba573dea893f9de707e9fedf43d405674 \
-    --hash=sha256:8dccaaf7ea7f8b20250adc0bf8053dec41238abaf6c23e1f4c37d6d9e30cd5f2 \
-    --hash=sha256:98e6582d897da06e47ed76f56eab1007c8d1f12fee27b9627a7175b0a2fe7ea9 \
-    --hash=sha256:9e54110c2dfde68da801ca9ba73e0b619d29775f58ad0220b2aac13d9f95d66c \
-    --hash=sha256:a3575e09f560875db56d9549744a8ebc183b6fa5dbf09faea4fc8534c6dd3273 \
-    --hash=sha256:a9e7d385a7d4934eadef0eb6feef4827fab57533fb382a371e1c9500edc1ed37 \
-    --hash=sha256:b7e5a7d34ebace0e4f4655ac503838f8ac7020d43fdc5daedd6004a9322a0659 \
-    --hash=sha256:bd1a04056891fa56145dc3cad36b8afc497b215e504adee02c9a94d7dde95848 \
-    --hash=sha256:c4e8d251e5e429419f4186d9b61ac1dc48ece32791f3ebaf8add473d1b9353b8 \
-    --hash=sha256:c5724c997f06405d65a0cce28021587dfdcfeb9d60fe89e89ea26bef1f80d963 \
-    --hash=sha256:c5bee3c15b3db6f0ff99cc3f8943f9048ae397495789ed2113bf856ffc03ab57 \
-    --hash=sha256:c5c480f79d6f53b20342fbe695a1edfe4a4462bb5debc5045fb0a564212c09b4 \
-    --hash=sha256:ca78382675b2072987f51da70ed047c2f85f52ea7fff887fdc7b92a28b4402e2 \
-    --hash=sha256:d3bffe901dc9a3aa46ae61a641bda37e8b058b1139473b9f065f810264eb2337 \
-    --hash=sha256:e29d604e4a2bd6083893cc788ba932b5ff66483913ac3ca3b0823d09c1d885d7 \
-    --hash=sha256:efe1e670e3ea1ba747f63d9bff6728d13ef9884b25a8ff160d9946b86b451444 \
-    --hash=sha256:f97a5db5ef16c484792ff90be1236f20c3c9a0012e3c7023dd5cbc40ce71273a
+ddtrace==2.14.4 \
+    --hash=sha256:01b315024ee8cda0673f443bcd5d0015f4e37934e511d6c6899c54a6c6010751 \
+    --hash=sha256:034b0663b2d0db05debf7507e61f71c9e9d3f9706fe6aae5fb9c9ed0a9c2b7c9 \
+    --hash=sha256:0725a8515526caef46defbe1a84a33b459016a6e0bd240a4f54eaa7b6c07b515 \
+    --hash=sha256:0bd22635660c70ad400057437255add66d588ee61ab0ae544f3b4a017f2ef758 \
+    --hash=sha256:0d01c0c1611aa89aa96f0fa55c354f7279d4927c515a67ebd10ddba1d53c753f \
+    --hash=sha256:15912d9178af01a851fc578480b85917e2e8e51b16d18d3f58c2fa3435a162a7 \
+    --hash=sha256:190312f0c278c2c4245bc08e16de8e2127bc584a796860ad22b2ac89a4e1b340 \
+    --hash=sha256:19946e04c42c28519e9e74c996feccdc64830d00375477e3bc92b5c36fcaa461 \
+    --hash=sha256:26124bca28d33d4e6991aa653c401e5bdafac4f1d21a55f24a53f355f6c27d85 \
+    --hash=sha256:2aedc0a26a9c109fe04fa1c4e8c42fb8977f59d4c5495c20573624ebdc74c585 \
+    --hash=sha256:2e3f6f88039dd1b2f826d39ac1c629c3444ac456a4c933e364243b86e38dbaf7 \
+    --hash=sha256:32790eab788ea63c33a61239a09bf777ed5a969827770e6c9a0d2d4591e9c26b \
+    --hash=sha256:354080d26f159d997fd8c6b37f6d21665fb8c35291eed9b7603043a3da1695b6 \
+    --hash=sha256:39f853530e85fc95ba706da2a445c8b5034794f3c7d333e701807b1ce655fc9a \
+    --hash=sha256:3f6a1b8a2e6e2b6b964cbf375af916625e28d77ef6fe3e0e4e5f2a7fc9a5f712 \
+    --hash=sha256:3fb952c31574dffbd5b8d95471f0941415748b5da309ba864c3751b12ea4a051 \
+    --hash=sha256:41f5f617bab1f1287a085268b4e95a1d90bb5b324859dd2ae0b59d7d2dab1001 \
+    --hash=sha256:4a21ef11b6f59237315320014a77c47ed37a5834cc8599e255dffba90398dc40 \
+    --hash=sha256:4ebbf92529d00819dc79641c6334476023792da60fb6c889dca280e13ffbd6d3 \
+    --hash=sha256:502826c8ba30a7b59d72dbf0bbc71e131dd274e01a107edd6116c400c2c5e46b \
+    --hash=sha256:503c1b1791f6d804535fdab0908a3a79e6751e47ecd5c465dabcffd335e35c0a \
+    --hash=sha256:558fe292d0c03aac6b034c2014489881c0a36390aca4f49bc199cdd9880faa44 \
+    --hash=sha256:7091390be67ba711d0a5aa4886fca1124b541c6ca575010f8bd5abc448176ac8 \
+    --hash=sha256:71879996aacda72bfbd8d4fc2906e8ba099b026d705943970e4b33074b977d32 \
+    --hash=sha256:73bc80aac53922b81f6705333854f2fc8efe7e3f3499ea276268873a9e855e8b \
+    --hash=sha256:74794b9555b005e9be9dea9ae76350e218fdaddcf8070b1c8a4be7aeefa24433 \
+    --hash=sha256:769eb974c2500d7e8d70a916f324f3976dc2664eaf6c52e5553989c335a271b2 \
+    --hash=sha256:775483c435719855cc5a6d9a6fd2a36246ede1ed038e30112a0a0c8f6cbe9b91 \
+    --hash=sha256:793b8e269c196dc9449b87914df95b4e6a2c69de10a12d42fd4a5184d5eca423 \
+    --hash=sha256:8235035451a5d560e6c7fe3cc789ae4d36b9276a6c7ca2979882f35aa67fadf1 \
+    --hash=sha256:84221097dd827d3ab4e36bfebd9007e6eb962d523f86a8fb9ee3c6d046bd800f \
+    --hash=sha256:87d594ebcf70714c9b6cbb2bdd9d3f77ada787be6fca99c9fe9230eb6c203d32 \
+    --hash=sha256:893dec5458eee7a3f7fda6b6f254cf7b8bd00016bcc13befcad47c98a3acaeb6 \
+    --hash=sha256:8fd863bb363fcaa01290c979eb3061a865998c3ef2484ab0ed09f523a4b7191f \
+    --hash=sha256:92686e740679d60bb353cf822dbf2a9631d469bf5d19b02a14a195fc26421bbd \
+    --hash=sha256:9561d1808bf5b0108d19da72aad3b28fc8636444f1a67e62b4135dfa9796fa13 \
+    --hash=sha256:9593407a7eaf1de0faf50ad787412a599ea0036c1bed53015e8ac8bb02d25dfe \
+    --hash=sha256:9a750a779813c72e469712f8e2bc8cf0c339ee9d5d9ffbcb51eccbd9391e77e6 \
+    --hash=sha256:9eed749fe47d3f05f550048d89a4101a8419479df9ed48a0dcaf43edd9e93dab \
+    --hash=sha256:aeeb2e97ad31ecc8428c028689213b46ba9b862df1895082945f184ff1fac570 \
+    --hash=sha256:b00db880723c4e7717d17c1e9bb03669aece42fa5375b577ed8a6fbdf30fe7df \
+    --hash=sha256:b641f8665adadc45dda9887721bfcae09ce22ee853d993c4118e038e4d8493a5 \
+    --hash=sha256:b74e05d56fafbd49999e1db9fbabfaa9d1733a693a9a22dd8c1455e8871095af \
+    --hash=sha256:b76e27fddc9727b07aed1995bcca04e71c0c2ff4c6bafb78a30695979af8153d \
+    --hash=sha256:c11419f36f3fda698d50df411903d1baab58ccb220548bee24addbe4dc49b4d6 \
+    --hash=sha256:c204378e098383e9c01c6d64575966ace0c289fabfc2725580f14bfa999a199d \
+    --hash=sha256:c22d4ca64f6646838ef85eed1f25c82c568546d1ea7df4a524f03d17ac64a420 \
+    --hash=sha256:c42766844344a6e1452cb887962d2cf72a765c4578ebafd67ed0816b4bf2eaba \
+    --hash=sha256:c5d888fb987500803809ba65e7d753397b7bf1b1cb38b958fd2daee40a500f89 \
+    --hash=sha256:cbcb98cf777df17b07241e735877cfd2adf99d0d93fcdc9b23df0fbbc74268c1 \
+    --hash=sha256:cbedfeeaa01fe4a3519caeb29edd189e19440bdffea9e310fe2c40acbda0eeef \
+    --hash=sha256:cc58e1d10e97dcb2ea6f54bd11e2d1b381c202ab5c27ea3c92268093f9e0b219 \
+    --hash=sha256:d6f0f6c8eb2e2f2516191c27e019d634522d9c9c0e8fa267edaa05bfe851661d \
+    --hash=sha256:dedfe6ae56875af16763cb9919d4a337ee0b1878c580eb81eef70928a44543af \
+    --hash=sha256:dfc81f2771850e1b08fdc2fccf9fd58d2ae14f82dc26cf8dec25a364c6af4127 \
+    --hash=sha256:e3558c54f78d07738cc6244d30be5c402c4efb0df6751ddb0010d1c8d18a6bf1 \
+    --hash=sha256:eb48e26b1f4f09e426a154473000f4b1cd80615df0a07b4a9cfc6ec7bce86cc9 \
+    --hash=sha256:f5a4be0b64cdb88f634048f002418364f4fb5495577426296d5010cc2e27d4ca \
+    --hash=sha256:fd3c026104964845c770c37d85676d1e2ed22a62dcbff9a75410a15e672f5ea9 \
+    --hash=sha256:fe5f224786dc5f80f09238098d0863e5eb7f870b46a65295c380851e34f0cc5e
     # via -r requirements/deploy.in
 deprecated==1.2.14 \
     --hash=sha256:6fac8b097794a90302bdbb17b9b815e732d3c4720583ff1b198499d78470466c \
     --hash=sha256:e5323eb936458dccc2582dc6f9c322c852a775a27065ff2b0c4970b9d53d01b3
     # via opentelemetry-api
-envier==0.5.2 \
-    --hash=sha256:4e7e398cb09a8dd360508ef7e12511a152355426d2544b8487a34dad27cc20ad \
-    --hash=sha256:65099cf3aa9b3b3b4b92db2f7d29e2910672e085b76f7e587d2167561a834add
+envier==0.6.1 \
+    --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \
+    --hash=sha256:73609040a76be48bbcb97074d9969666484aa0de706183a6e9ef773156a8a6a9
     # via ddtrace
 gunicorn==23.0.0 \
     --hash=sha256:ec400d38950de4dfd418cff8328b2c8faed0edb0d517d3394e457c317908ca4d \
@@ -94,18 +94,18 @@ packaging==24.1 \
     --hash=sha256:026ed72c8ed3fcce5bf8950572258698927fd1dbda10a5e981cdf0ac37f4f002 \
     --hash=sha256:5b8f2217dbdbd2f7f384c41c628544e6d52f2d0f53c6d0c3ea61aa5d1d7ff124
     # via gunicorn
-protobuf==4.25.3 \
-    --hash=sha256:19b270aeaa0099f16d3ca02628546b8baefe2955bbe23224aaf856134eccf1e4 \
-    --hash=sha256:209ba4cc916bab46f64e56b85b090607a676f66b473e6b762e6f1d9d591eb2e8 \
-    --hash=sha256:25b5d0b42fd000320bd7830b349e3b696435f3b329810427a6bcce6a5492cc5c \
-    --hash=sha256:7c8daa26095f82482307bc717364e7c13f4f1c99659be82890dcfc215194554d \
-    --hash=sha256:c053062984e61144385022e53678fbded7aea14ebb3e0305ae3592fb219ccfa4 \
-    --hash=sha256:d4198877797a83cbfe9bffa3803602bbe1625dc30d8a097365dbc762e5790faa \
-    --hash=sha256:e3c97a1555fd6388f857770ff8b9703083de6bf1f9274a002a332d65fbb56c8c \
-    --hash=sha256:e7cb0ae90dd83727f0c0718634ed56837bfeeee29a5f82a7514c03ee1364c019 \
-    --hash=sha256:f0700d54bcf45424477e46a9f0944155b46fb0639d69728739c0e47bab83f2b9 \
-    --hash=sha256:f1279ab38ecbfae7e456a108c5c0681e4956d5b1090027c1de0f934dfdb4b35c \
-    --hash=sha256:f4f118245c4a087776e0a8408be33cf09f6c547442c00395fbfb116fac2f8ac2
+protobuf==5.28.3 \
+    --hash=sha256:0c4eec6f987338617072592b97943fdbe30d019c56126493111cf24344c1cc24 \
+    --hash=sha256:135658402f71bbd49500322c0f736145731b16fc79dc8f367ab544a17eab4535 \
+    --hash=sha256:27b246b3723692bf1068d5734ddaf2fccc2cdd6e0c9b47fe099244d80200593b \
+    --hash=sha256:3e6101d095dfd119513cde7259aa703d16c6bbdfae2554dfe5cfdbe94e32d548 \
+    --hash=sha256:3fa2de6b8b29d12c61911505d893afe7320ce7ccba4df913e2971461fa36d584 \
+    --hash=sha256:64badbc49180a5e401f373f9ce7ab1d18b63f7dd4a9cdc43c92b9f0b481cef7b \
+    --hash=sha256:70585a70fc2dd4818c51287ceef5bdba6387f88a578c86d47bb34669b5552c36 \
+    --hash=sha256:712319fbdddb46f21abb66cd33cb9e491a5763b2febd8f228251add221981135 \
+    --hash=sha256:91fba8f445723fcf400fdbe9ca796b19d3b1242cd873907979b9ed71e4afe868 \
+    --hash=sha256:a3f6857551e53ce35e60b403b8a27b0295f7d6eb63d10484f12bc6879c715687 \
+    --hash=sha256:cee1757663fa32a1ee673434fcf3bf24dd54763c79690201208bafec62f19eed
     # via ddtrace
 typing-extensions==4.12.2 \
     --hash=sha256:04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d \