Skip to content

repository/legacy: calculate sha256 if unavailable#2958

Merged
kasteph merged 1 commit intopython-poetry:masterfrom
abn:issue/1631
Mar 22, 2021
Merged

repository/legacy: calculate sha256 if unavailable#2958
kasteph merged 1 commit intopython-poetry:masterfrom
abn:issue/1631

Conversation

@abn
Copy link
Copy Markdown
Member

@abn abn commented Sep 25, 2020

In some cases, legacy repositories might not provide a checksum as a
url fragment or use a deprecated algorithm. In these scenarios, this
change ensures that poetry downloads and calculates the sha256 checksum
for the file.

Resolves: #1631 #1553

@abn abn requested a review from a team September 25, 2020 00:21
@abn abn marked this pull request as ready for review September 25, 2020 13:51
@aidan-melen
Copy link
Copy Markdown

Hey @abn, when is this slotted to be released? Is there a beta with this functionality that I can test with?

@aidan-melen
Copy link
Copy Markdown

nvm. i just did pipx install git+http://github.com/abn/poetry.git@issue/1631

@abn
Copy link
Copy Markdown
Member Author

abn commented Nov 19, 2020

No fixed plans; the release after when this is reviewed as this is not in the roadmap explicitly.

@abn
Copy link
Copy Markdown
Member Author

abn commented Nov 19, 2020

@finswimmer can you take a peek at this?

In some cases, legacy repositories might not provide a checksum as a
url fragment or use a deprecated algorithm. In these scenarios, this
change ensures that poetry downloads and calculates the sha256 checksum
for the file.

Resolves: python-poetry#1631 python-poetry#1553
@paulmelnikow
Copy link
Copy Markdown

Hi! Is it possible this change could have caused a regression when installing from legacy repositories which return md5 checksums? #4085 (comment)

@github-actions
Copy link
Copy Markdown

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Feb 29, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Private repository dependency isn't exported with sha256 hash

4 participants