fix(#1202): update unearth to fix package install issue for private pypi

pdm-project · Jul 6, 2022 · 204f96c · 204f96c
1 parent e05aadc
commit 204f96c
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 7 deletions.
diff --git a/news/1202.bugfix.md b/news/1202.bugfix.md
@@ -0,0 +1 @@
+Update `unearth` to fix a bug that install links with weak hashes are skipped. This often happens on self-hosted PyPI servers.
diff --git a/pdm.lock b/pdm.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
     "shellingham>=1.3.2",
     "python-dotenv>=0.15",
     "resolvelib>=0.8,<0.9",
-    "unearth>=0.4.1,<0.5.0",
+    "unearth>=0.5.0,<1",
     "installer>=0.5.1,<0.6",
     "pdm-pep517>=1.0.0,<2.0.0",
     "cachecontrol[filecache]>=0.12.11",
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Update `unearth` to fix a bug that install links with weak hashes are skipped. This often happens on self-hosted PyPI servers.