i have no idea why it is trying to upload to the legacy url though. i don't have it mentioned anywhere, and i've confirmed that all of twine, pip, setuptools, python are modern enough (EDIT:

<https://upload.pypi.org/legacy/>

is actually the correct/modern/default url)