Skip to content

Allow unpinned requirements to use hashes from constraints#13887

Draft
pradyunsg wants to merge 1 commit intopypa:mainfrom
pradyunsg:resolver-constraints-pins-hashes
Draft

Allow unpinned requirements to use hashes from constraints#13887
pradyunsg wants to merge 1 commit intopypa:mainfrom
pradyunsg:resolver-constraints-pins-hashes

Conversation

@pradyunsg
Copy link
Copy Markdown
Member

Closes #9243, I think?

This is now a tomorrow thing for me. Gotta go to PyCon US stuff now.

Constraints with `==version --hash=...` correctly narrow the candidate
set, but the per-candidate `InstallRequirement` still reflected the
original unpinned and hashless requirement.

In such a configuration, plumb through the hashes from the constraints
to the per-candidate `InstallRequirement`, and pin it to the version
from the link (which is informed by the constraint). This makes
hashes get correctly used for candidate selection and verification, at
the cost of a few copies at the start of the resolve in such cases.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[regression] resolvelib-based dependency processing of constraints with hashes fails to "see" the exact pins

1 participant