Bump twine from 6.2.0 to 7.0.0

[dependabot]

Bumps twine from 6.2.0 to 7.0.0.

Changelog

Sourced from twine's changelog.

twine 7.0.0 (2026-07-27)

Bugfixes ^^^^^^^^

• Specify UTF-8 encoding when reading .pypirc files. ([#1268](https://github.com/pypa/twine/issues/1268) <https://github.com/pypa/twine/issues/1268>_)
• Add missing subdependencies to --version output. ([#1275](https://github.com/pypa/twine/issues/1275) <https://github.com/pypa/twine/issues/1275>_)
• The dependency on rich has been bumped to avoid a hang in some environments. ([#1308](https://github.com/pypa/twine/issues/1308) <https://github.com/pypa/twine/issues/1308>_)
• Indices that respond with non-standard HTTP codes are now handled more gracefully. ([#1309](https://github.com/pypa/twine/issues/1309) <https://github.com/pypa/twine/issues/1309>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

• Fix uploading packages with metadata version 2.5. The fix no longer allows metadata version 2.0, which was never officially standardised. ([#1317](https://github.com/pypa/twine/issues/1317) <https://github.com/pypa/twine/issues/1317>_)

Misc ^^^^

• [#1298](https://github.com/pypa/twine/issues/1298) <https://github.com/pypa/twine/issues/1298>_

Commits

• fdb86cb Update changelog for 7.0.0 (#1344)
• bfa7f7f changelog: backfill entries from PRs (#1330)
• 4f20c0d Remove monkeypatch allowing Metadata 2.0 (#1317)
• 1df249e build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#1318)
• bea9607 fix: bump minimum rich dependency to 14.3.3 to prevent verbose hang (#1308)
• ac17a17 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1311)
• 039cedf build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#1313)
• d465cb0 Handle non-standard HTTP status codes (#1309)
• cab618f Bump packaging >= 26.1 (#1310)
• 2d06e11 build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#1307)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Code Review: Bump twine from 6.2.0 to 7.0.0

Scope: This diff is a single-line dependency version bump in pyproject.toml (line 44), likely from Dependabot.

Code Quality

• ✅ Style conventions: Change follows existing formatting in the development dependency list (pyproject.toml:44).
• ✅ No commented-out code: N/A, none present.
• ✅ Meaningful variable names: N/A, no code logic changed.
• ✅ DRY principle: N/A.
• ⚠️ Defects: No bugs introduced by this change itself, but twine 7.0.0 is a major version bump from 6.x. Major version bumps for packaging/upload tooling can include breaking CLI changes (e.g., dropped Python version support, changed default behaviors for twine upload/twine check). Since twine is only a development extra (not a runtime dependency), risk to the shipped snippets is low, but if this repo runs twine upload or twine check in a CI/release pipeline, worth confirming that flow still passes.
• ✅ CLAUDE.md consideration: .claude/CLAUDE.md is unchanged by this PR and contains no environment-specific hardcoding (paths, credentials, machine-specific config) — it remains general-purpose. No issue.

Testing

• N/A — this is a dependency version bump with no new functions or endpoints. No tests are expected for this change.
• Recommend confirming CI (build/lint/release workflows) passes with twine 7.0.0 before merge, since that's the only functional risk here.

Documentation

• ✅ No README/API docs/CHANGELOG updates needed for a dev-dependency bump.
• N/A — Markdown formatting check doesn't apply; no .md files changed in this diff.

Security

• ✅ No hardcoded credentials introduced.
• ✅ No input validation concerns (dependency manifest only).
• ✅ No error handling changes.
• ✅ No sensitive data in logs.
• ✅ No .lic files or AQAAAD-prefixed strings found in this diff.

Summary

Low-risk, mechanical dependency bump. No defects, security issues, or license files in the diff. Only recommendation: verify CI/release pipeline still succeeds with twine 7.0.0 given it's a major version jump, since major releases occasionally alter CLI behavior.

Automated code review analyzing defects and coding standards