prevent pip to look for dependency during install

[vepatel]

Proposed changes

• prevent pip from looking for hashes of dependencies at the installation time

Checklist

Before creating a PR, run through this checklist and mark each as complete.

• I have read the CONTRIBUTING doc
• I have added tests that prove my fix is effective or that my feature works
• I have checked that all unit tests pass after adding my changes
• I have updated necessary documentation
• I have rebased my branch onto main
• I will ensure my PR is targeting the main branch and pulling from my branch from my own fork

[codecov]

Codecov Report

Merging #4342 (1ad9ed0) into main (8f60ab4) will decrease coverage by 0.03%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #4342      +/-   ##
==========================================
- Coverage   52.11%   52.08%   -0.03%     
==========================================
  Files          59       59              
  Lines       16956    16956              
==========================================
- Hits         8836     8832       -4     
- Misses       7823     7825       +2     
- Partials      297      299       +2     

see 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[lucacome]

prevent pip from looking for hashes of dependencies at the installation time

Why do we want this? We don't want to use hashes?

[vepatel]

@lucacome its looking for hashes of indirect dependencies during install sometimes, there's an pypi issue as well for this see the linked issue and pipeline failure for more details. We can revert this change once it's fixed.
Other option here is to use --use-deprecated=legacy-resolver
Note: pip install fails locally as well without this option.

[lucacome]

I feel like we should figure out why it only happens sometimes before disabling it. It kind of defeats the purpose of the hashes if we don't check them...

[vepatel]

more than happy to remove hashes and go back to old way of pinning libs actually used by tests. Not sure what we can do if the issue is in pypi impementation.