attestations: Use latest released twine

Author: facutuesca

Dockerfile

@@ -13,9 +13,6 @@ ENV PIP_ROOT_USER_ACTION ignore
 ENV PATH "/root/.local/bin:${PATH}"
 ENV PYTHONPATH "/root/.local/lib/python3.12/site-packages"
 
-# NOTE: Temporary; to be removed once a new twine is released.
-RUN apt-get update && apt-get install -y git
-
 COPY requirements requirements
 RUN \
   PIP_CONSTRAINT=requirements/runtime-prerequisites.txt \

requirements/runtime.in

@@ -1,7 +1,4 @@
-# NOTE: Temporarily pulling directly from GitHub for the attestations feature,
-# which is not yet released.
-# See: https://github.com/pypa/twine/issues/1094
-twine @ git+https://github.com/pypa/twine@5d17a43dec622d6f4fc490937baad3db4b9a8e29
+twine
 
 # NOTE: Used to detect an ambient OIDC credential for OIDC publishing,
 # as well as PEP 740 attestations.

requirements/runtime.txt

@@ -119,7 +119,7 @@ six==1.16.0
     # via python-dateutil
 tuf==4.0.0
     # via sigstore
-twine @ git+https://github.com/pypa/twine@5d17a43dec622d6f4fc490937baad3db4b9a8e29
+twine==5.1.0
     # via -r runtime.in
 typing-extensions==4.10.0
     # via