uv/crates/uv-types
Charlie Marsh 0d62e62fb7
Make hash-checking failure mode stricter and safer (#2997)
## Summary

If there are no hashes for a given package, we now return
`Validate(&[])` so that the policy is impossible to satisfy. Previously,
we returned `None`, which is always satisfied.

We don't really ever expect to hit this, because we detect this case in
the resolver and raise a different error. But if we have a bug
somewhere, it's better to fail with an error than silently let the
package through.
2024-04-11 17:53:34 +00:00
..
src Make hash-checking failure mode stricter and safer (#2997) 2024-04-11 17:53:34 +00:00
Cargo.toml Support unnamed requirements in --require-hashes (#2993) 2024-04-11 11:26:50 -04:00