Skip to content

Enforce direct URL hashes for pyproject.toml dependencies#18786

Open
charliermarsh wants to merge 1 commit intomainfrom
charlie/url-hash
Open

Enforce direct URL hashes for pyproject.toml dependencies#18786
charliermarsh wants to merge 1 commit intomainfrom
charlie/url-hash

Conversation

@charliermarsh
Copy link
Copy Markdown
Member

Summary

These requirements are technically "transitive", so we miss them in our initial pass. As such, we need to collect them while we lookahead.

Closes #18778.

@charliermarsh charliermarsh added the bug Something isn't working label Apr 1, 2026
@charliermarsh charliermarsh marked this pull request as ready for review April 1, 2026 01:54
@charliermarsh charliermarsh requested a review from konstin April 1, 2026 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mismatching hash is ignored when dependency is direct url

1 participant