Skip to content

Incorrect SHA256 on index for torchvision-0.24.0+cu128-cp313-cp313-win_amd64.whl #9243

@konstin

Description

@konstin

On the torch index, there is a wheel torchvision-0.24.0+cu128-cp313-cp313-win_amd64.whl at https://download.pytorch.org/whl/cu128/torchvision-0.24.0%2Bcu128-cp313-cp313-win_amd64.whl. The wheel says its hash is d3749f66f14efa371129339c770b1b703cace6f0bf7bea2dee50a103eda10491, but its hash is actually f82cd941bc36033ebdb2974c83caa2913cc37e6567fe97cdd69f5a568ff182c8

From https://download.pytorch.org/whl/torchvision/:

    <a href="/whl/cu128/torchvision-0.24.0%2Bcu128-cp313-cp313-win_amd64.whl" data-dist-info-metadata="sha256=d3749f66f14efa371129339c770b1b703cace6f0bf7bea2dee50a103eda10491" data-core-metadata="sha256=d3749f66f14efa371129339c770b1b703cace6f0bf7bea2dee50a103eda10491">torchvision-0.24.0+cu128-cp313-cp313-win_amd64.whl</a><br/>
curl --silent https://download.pytorch.org/whl/cu128/torchvision-0.24.0%2Bcu128-cp313-cp313-win_amd64.whl | sha256sum 
f82cd941bc36033ebdb2974c83caa2913cc37e6567fe97cdd69f5a568ff182c8  -

This breaks installation with hash checking clients such as uv, as reported in astral-sh/uv#16310.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions