PyPI fixes. (#1061)

- Checkout submodules in the PyPI builder to make sure the OSV schema is
included in the built package.
- Make sure the JSON schema is included as a data file. 
- Add missing PyPI package dependencies. This should align with our root
Pipfile.

Part of #1060

.github/workflows/publish-to-pypi.yaml

@@ -27,6 +27,7 @@ jobs:
     - uses: actions/checkout@v3 # v2.3.4
       with:
         fetch-depth: 0
+        submodules: recursive
     - name: Set up Python 3
       uses: actions/setup-python@v4 # v2.2.2
       with:

setup.py

@@ -19,7 +19,7 @@
 
 setuptools.setup(
     name='osv',
-    version='0.0.17',
+    version='0.0.18',
     author='OSV authors',
     author_email='osv-discuss@googlegroups.com',
     description='Open Source Vulnerabilities library',
@@ -39,11 +39,17 @@
         'PyYAML',
         'semver',
         'attrs',
-        'jsonschema'
+        'jsonschema',
+        'grpcio',
+        'packaging',
     ],
     package_dir={
         '': '.',
     },
+    package_data={
+        # Include any JSON schemas.
+        '': ['*.json'],
+    },
     python_requires='>=3.7',
     zip_safe=False,
 )