Alex Gaynor

Sorry, to be more precise, the constraints file contains hashes. It doesn't have `--require-hashes`, but I believe those are equivalent.

``` (tempenv-6e562856703b6) ~/.v/tempenv-6e562856703b6 ❯❯❯ pip download --no-binary :all: --no-deps pretend Collecting pretend File was already downloaded /Users/alex_gaynor/.virtualenvs/tempenv-6e562856703b6/pretend-1.0.9.tar.gz Installing build dependencies ... done Getting requirements to build wheel ... done Preparing...

No, there's no hash for the local sdist. Personally, I find it surprising and unexpected that a hash is required for a local file. On Fri, Aug 30, 2024 at...

I'm reticent to suggest a flag, since that's just Yet Another Thing for users. But if the existing behavior is desired, then maybe this is a feature request for some...

Sorry, I should have said index-provided. I don't know what to do about the general case of local file path. It seems clear (to me at least?) that "the sdist...

Because I want to pin the versions of `build-system.requires`. In my actual use case, the `sdist` is produced by a previous step in the CI system. See https://github.com/pyca/cryptography/pull/11500

I suppose it's possible `-c` doesn't work and I need to use `PIP_CONSTRAINT`, but that seems orthogonal to this. (It's also a fairly significant foot-gun, but that's also orthogonal!) I...

build has no way to take an sdist as input, AFAICT. On Fri, Aug 30, 2024 at 11:22 AM Paul Moore ***@***.***> wrote: > (If there's a better tool than...

To take a step back here: My overall goal is to take a local sdist, build a wheel from it, and do so with any downloaded artifacts pinned to a...

playwright-python is currently a dependency of one homebrew package: https://github.com/Homebrew/homebrew-core/blob/master/Formula/t/theharvester.rb#L202-L205 As you can see, for all the other dependencies, we download sdists from PyPI, but for this we download the...