mirror of https://github.com/pypa/pip
925e4b4466
This would occur when, for example, installing from a requirements file that references a certain hashed sdist, a common situation. As of pip 7, pip always tries to build a wheel for each requirement (if one wasn't provided directly) and installs from that. The way this was implemented, InstallRequirement.link pointed to the cached wheel, which obviously had a different hash than the index-sourced archive, so spurious mismatch errors would result. Now we no longer read from the wheel cache in hash-checking mode. Make populate_link(), rather than the `link` setter, responsible for mapping InstallRequirement.link to a cached wheel. populate_link() isn't called until until prepare_files(). At that point, when we've examined all InstallRequirements and their potential --hash options, we know whether we should be requiring hashes and thus whether to use the wheel cache at all. The only place that sets InstallRequirement.link other than InstallRequirement itself is pip.wheel, which does so long after hashes have been checked, when it's unpacking the wheel it just built, so it won't cause spurious hash mismatches. |
||
|---|---|---|
| .. | ||
| index.rst | ||
| pip.rst | ||
| pip_download.rst | ||
| pip_freeze.rst | ||
| pip_hash.rst | ||
| pip_install.rst | ||
| pip_list.rst | ||
| pip_search.rst | ||
| pip_show.rst | ||
| pip_uninstall.rst | ||
| pip_wheel.rst | ||