pyproj4 / pyproj

Python interface to PROJ (cartographic projections and coordinate transformations library)
https://pyproj4.github.io/pyproj
MIT License
1.05k stars 212 forks source link

Wrong hashes for `pyproj==3.5.0` #1281

Closed mindflayer closed 1 year ago

mindflayer commented 1 year ago

Installation method/steps

Environment Information

I tried to upgrade pyproj a few times in the last few days and I always face an issue similar to:

#0 50.89 Collecting pyproj==3.5.0 (from -r requirements.dev.txt (line 1537))
#0 50.91   Downloading pyproj-3.5.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (7.8 MB)
#0 51.10      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 7.8/7.8 MB 41.6 MB/s eta 0:00:00
#0 51.10 ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, please update the hashes. Otherwise, examine the package contents carefully; someone may have tampered with them.
#0 51.10     pyproj==3.5.0 from https://files.pythonhosted.org/packages/1b/01/6df17f3b802b2d49480c102516dff30d294c4d300dbc3dfa9a9867b83609/pyproj-3.5.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (from -r requirements.dev.txt (line 1537)):
#0 51.10         Expected sha256 38862fe07316ae12b79d82d298e390973a4f00b684f3c2d037238e20e00610ba
#0 51.10         Expected     or 621d78a9d8bf4d06e08bef2471021fbcb1a65aa629ad4a20c22e521ce729cc20
#0 51.10         Expected     or 7bdd2021bb6f7f346bfe1d2a358aa109da017d22c4704af2d994e7c7ee0a7a53
#0 51.10         Expected     or c02742ef3d846401861a878a61ef7ad911ea7539d6cc4619ddb52dbdf7b45aee
#0 51.10              Got        1b7c2113c4d11184a238077ec85e31eda1dcc58ffeb9a4429830e0a7036e787d
#0 51.10
snowman2 commented 1 year ago

Mind providing detailed installation commands? Do you have a poetry lock file you are using?

mindflayer commented 1 year ago

This is what poetry lock produces:

[...]

[[package]]
name = "pyproj"
version = "3.5.0" 
description = "Python interface to PROJ (cartographic projections and coordinate transformations library)"
category = "main"
optional = false
python-versions = ">=3.8"
files = [
    {file = "pyproj-3.5.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7bdd2021bb6f7f346bfe1d2a358aa109da017d22c4704af2d994e7c7ee0a7a53"},
    {file = "pyproj-3.5.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:621d78a9d8bf4d06e08bef2471021fbcb1a65aa629ad4a20c22e521ce729cc20"},
    {file = "pyproj-3.5.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:38862fe07316ae12b79d82d298e390973a4f00b684f3c2d037238e20e00610ba"},
    {file = "pyproj-3.5.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c02742ef3d846401861a878a61ef7ad911ea7539d6cc4619ddb52dbdf7b45aee"},
]

[...]
mindflayer commented 1 year ago

I see what is going on: poetry is trying to install pyproj-3.5.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl while the file saved in the lock is pyproj-3.5.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl. It's x86_64 vs aarch64.

snowman2 commented 1 year ago

Closing as this is a poetry issue and not a pyproj issue.