Python
/
uv
mirror of https://github.com/astral-sh/uv
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
uv/crates/uv-resolver
History
Charlie Marsh 6fa8204efe
Avoid enforcing incorrect hash in mixed-hash settings (#17157) 
## Summary

Right now, when we return a `Dist` from a lockfile, we concatenate all
hashes for all distributions for a given package. In the case of
https://github.com/astral-sh/uv/issues/17143, I think that means we'll
return the SHA256 from the sdist, plus the SHA512 from the wheel. If the
wheel was previously installed (i.e., it's in the cache), and we
computed the SHA256 at that point in time, then `Hashed::has_digests`
would return `true` because we have _at least_ one SHA256. We now limit
the hashes to the distribution that we expect to install.

Closes https://github.com/astral-sh/uv/issues/17143.
 		2025-12-17 16:01:59 +00:00
..
src Avoid enforcing incorrect hash in mixed-hash settings (#17157) 2025-12-17 16:01:59 +00:00
Cargo.toml Bump version to 0.9.18 (#17141) 2025-12-16 13:32:35 +00:00
README.md Bump version to 0.9.18 (#17141) 2025-12-16 13:32:35 +00:00

README.md

uv-resolver

This crate is an internal component of uv. The Rust API exposed here is unstable and will have frequent breaking changes.

This version (0.0.8) is a component of uv 0.9.18. The source can be found here.

See uv's crate versioning policy for details on versioning.