MAINT: remove download-wheels.py and update release-requirements.txt

rgommers · rgommers · commit 2c5b1ebb9c30 · 2026-02-24T11:08:51.000+01:00
We're releasing from `numpy/numpy-release` with trusted publishing,
hence no more manual shuffling of wheels.

The main motivation of this change is that the script pulled in extra
dependencies like `urllib3`, which are triggering some (non-applicable)
security scanner alerts.

[ci skip]
diff --git a/doc/RELEASE_WALKTHROUGH.rst b/doc/RELEASE_WALKTHROUGH.rst
@@ -17,8 +17,6 @@ documentation. There are a few ways to streamline things:
 
 - Git can be set up to use a keyring to store your GitHub personal access token.
   Search online for the details.
-- You can use the ``keyring`` app to store the PyPI password for twine. See the
-  online twine documentation for details.
 
 
 Prior to release
diff --git a/requirements/release_requirements.txt b/requirements/release_requirements.txt
@@ -1,16 +1,9 @@
 # These packages are needed for a release in addition to those needed
 # for building, testing, and the creation of documentation.
 
-# download-wheels.py
-urllib3
-beautifulsoup4
-
 # changelog.py
 pygithub
 gitpython>=3.1.30
 
-# uploading wheels
-twine
-
 # uploading release documentation
 packaging
diff --git a/tools/download-wheels.py b/tools/download-wheels.py
