Closed
Description
🐞 bug report
Affected Rule
The issue is caused by the rule: pip_parse
Is this a regression?
No.
Description
pip_parse does not work with custom (URL-based) sources of packages.
🔬 Minimal Reproduction
If I have this listed in my requirements_lock, the rule will actually install spacy-transformers from PyPI with no version specified instead of downloading the archive from github.
https://github.com/explosion/spacy-transformers/archive/015daa34efbf2202b56080954832d029b99f821a.zip#egg=spacy-transformers \
--hash=sha256:f81470a17f999975b525d265a41d28a417944984774a710387cafeba47e0407
Additionally, it looks like the --hash is completely ignored for all packages.
🌍 Your Environment
Operating System:
Linux
Output of bazel version:
Build label: 4.0.0
Build target: bazel-out/k8-opt/bin/src/main/java/com/google/devtools/build/lib/bazel/BazelServer_deploy.jar
Build time: Thu Jan 21 07:33:24 2021 (1611214404)
Build timestamp: 1611214404
Build timestamp as int: 1611214404
Rules_python version:
Metadata
Metadata
Assignees
Labels
No labels