-
Notifications
You must be signed in to change notification settings - Fork 2.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
repository/legacy: calculate sha256 if unavailable #2958
Conversation
Hey @abn, when is this slotted to be released? Is there a beta with this functionality that I can test with? |
nvm. i just did |
No fixed plans; the release after when this is reviewed as this is not in the roadmap explicitly. |
@finswimmer can you take a peek at this? |
In some cases, legacy repositories might not provide a checksum as a url fragment or use a deprecated algorithm. In these scenarios, this change ensures that poetry downloads and calculates the sha256 checksum for the file. Resolves: python-poetry#1631 python-poetry#1553
Hi! Is it possible this change could have caused a regression when installing from legacy repositories which return md5 checksums? #4085 (comment) |
This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. |
In some cases, legacy repositories might not provide a checksum as a
url fragment or use a deprecated algorithm. In these scenarios, this
change ensures that poetry downloads and calculates the sha256 checksum
for the file.
Resolves: #1631 #1553