- update to 0.12.0 (bsc#1216480, CVE-2023-45805):
* Add callback to report download status
* Respect :all: in prefer_binary config
* security: Validate the package name extracted from the part
before the last hyphen
* Also fallback on "token" username for KeyringCliProvider
* Revert the handling of 403 and 404
* Handle 403 same as 401, and look for credentials on 404 error
* Close response files correctly
* Change FormatControl to respect the priority of only_binary
over no_binary
* Include useful message if VCS command not found
* Postpone the validation of hashes
* Migrate from deprecated pdm.pep517 to pdm.backend
* Tolerate invalid python requires
* Fix the dist info link evaluation
* PEP 714: rename the dist-info-metadata field to core-metadata

- Update to version 0.6.2