Poetry looking for `traitlets 5.2.2.post0`

Discussed in https://github.com/orgs/python-poetry/discussions/6825

<div type='discussions-op-text'>

^{Originally posted by adam-grant-hendry October 17, 2022} commitizen is encountering a strange issue in its CI workflows that poetry cannot find a nonexistent package:

Package traitlets (5.2.2.post0) not found

traitlets went from 5.2.2 -> 5.2.2.post1, but never released a post0 (nor was a post0 ever yanked). See the PyPI history.

The workflow doesn’t cache virtual environments, so there is no cache to manually clear on GitHub.

Has anyone experienced a similar issue? Is the dependency resolver expriencing an issue here because traitlets uses an extra post identifier in its versions and poetry is assuming there should be a post0…?

Any help is welcome and would be appreciated! Thank you!</div>

[neersighted]

This turned out to be an upload with mismatched metadata and filenames. It was resolved through a yank.

[neersighted]

Presumably traitlets is a transient dependency. Add an explicit dependency on the version you want to force.

I suspect that the authors of traitlets did some slightly risky stuff (like deleting a release immediately after upload) and are running into a variant of https://github.com/pypi/warehouse/issues/12214.