See e.g., https://github.com/pantsbuild/pants/runs/7262854632?check_suite_focus=true and many other CI runs unrelated to that file

Looks like a poetry lockfile is being generated without hashes or something

I don't reproduce locally

on macos

I ended up adding hashes manually to the lock files.

This behavior repos (at least for the Toolchain repo) on all platforms: Apple m1, Apple x86 and Ubuntu on x86

It is reproducible at least it the Toolchain repo

Upgrading to the latest poetry doesn't help and the latest poetry pre release breaks the api that pants uses so it doesn't work with pants at all right now

FACEPALM: Due to: https://discuss.python.org/t/backwards-incompatible-change-to-pypi-json-api/17154 And this code: in Poetry 1.1.8, which we use https://github.com/python-poetry/poetry/blob/bce13c14f73060b3abbb791dea585d8fde26eaef/poetry/repositories/pypi_repository.py#L272-L283

I'll attempt a fix with an upgrade.

Fix for broken Poetry lockfiles / test on main: https://github.com/pantsbuild/pants/pull/16112

So, to button up, for the folks that couldn't repro, there were up two contributing reasons: 1. You need to have a Poetry cache miss for the dependency in question 2. The PyPI json API endpoint it was using would have been variously available or unavailable dependening on your geo location and their rollout of the change vs. caching proxies.