Description

#10657 breaks caching when private repositories are used. It ends up comparing for example this:

{'file': 'pkg.whl', 'hash': 'sha256:abc...'}
{'file': 'pkg.whl', 'hash': 'sha256:abc...', 'url': 'someurl'}

Which does not pass, even though only the url is added - file and hash are the same. Only the file and hash should be considered. PR with fix: #10699

Workarounds

None.

Poetry Installation Method

pipx

Operating System

MacOs

Poetry Version

2.3.0

Poetry Configuration

not relevant

Python Sysconfig

No response

Example pyproject.toml

Poetry Runtime Logs

not relevant