Enable multiple file hashing methods for backwards and forwards compatibility

[colindean]

• I have searched the issues of this repo and believe that this is not a duplicate.
• I have searched the documentation and believe that my question is not covered.

Issue

My PR #4573 improves where the hash of an archive is checked against the hashes in the lockfile. While working on that PR, I spotted a potential improvement but want to collect feedback before I implement it.

I think this area could be further improved by representing the hashes as a dataclass or something containing the hash type and the string digest. The types of hashes would be more robust then instead of hardcoding sha256 in poetry/installation/executor.py and in FileDependency.hash(). It would also enable enumeration of hash types of known hashes so that FileDependency.hash() could return a list of hashes based on requested types. Doing this might alleviate the md5/sha256 problems arising from changes in poetry-core 1.0.6+ that affect Poetry 1.1.7+ users using Artifactory in at least #4523.

I'm willing to undertake this implementation if no maintainers object.

[colindean]

I'm going to undertake this!

[colindean]

python-poetry/poetry-core@68bf052 implemented a key part of this and I think @sdispater is heading in a similar direction…

[colindean]

python-poetry/poetry-core@68bf052 is not yet in 1.0 branch nor is it in a 1.1.0 alpha release. I'm not sure of the best way to consume poetry-core master in poetry other than just changing the dependency declaration temporarily. Ideally, I'd like to see that change released…

[neersighted]

This in in progress in #4486.

[colindean]

Thank you all especially @GMouzourou for picking up where I left off and finishing this finally!

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.