Skip to content
This repository was archived by the owner on Jan 5, 2021. It is now read-only.
This repository was archived by the owner on Jan 5, 2021. It is now read-only.

Requirements files containing the new --hash syntax cannot be checked #49

@edmorley

Description

@edmorley

STR:

  1. Create a requirements file containing:
requests==2.9.1 --hash=sha256:113fbba5531a9e34945b7d36b33a084e8ba5d0664b703c81a7c572d91919a5b8
  1. Drag onto https://caniusepython3.com/ and press check

Expected:
Requirements file can be checked successfully, the same as if it just contained requests==2.9.1.

Actual:

Project --hash=sha256:113fbba5531a9e34945b7d36b33a084e8ba5d0664b703c81a7c572d91919a5b8 invalid

The hash syntax was added in pip 8, as part of the new hash-checking mode:
http://pip.readthedocs.org/en/stable/user_guide/#hash-checking-mode
http://pip.readthedocs.org/en/stable/reference/pip_install/#hash-checking-mode

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions