update on lock with acryl-datahub fails with cryptic error message about pex HOT 4 CLOSED

@cburroughs I won't have time to work on this until tomorrow afternoon. The verified flag indicates whether the artifact hash has been calculated by Pex itself (verified=True), or taken as given (verified=False); i.e.: taken from a PyPI index artifact URL or JSON API metadata.

from pex.

Noting this fixes:

$ git diff
diff --git a/pex/resolve/locked_resolve.py b/pex/resolve/locked_resolve.py
index 241cb837..c4421063 100644
--- a/pex/resolve/locked_resolve.py
+++ b/pex/resolve/locked_resolve.py
@@ -148,7 +148,7 @@ class Artifact(object):

     url = attr.ib()  # type: str
     fingerprint = attr.ib()  # type: Fingerprint
-    verified = attr.ib()  # type: bool
+    verified = attr.ib(eq=False)  # type: bool

     def __lt__(self, other):
         # type: (Any) -> bool

An integration test is needed to prevent backslide though as well as a note explaining why this is right to ignore in __eq__.

from pex.

@cburroughs thanks for using the lock update feature and the bug report. the fix for this is now released in Pex 2.1.157: https://github.com/pantsbuild/pex/releases/tag/v2.1.157

from pex.

Thanks for the quick fix!

from pex.