# ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, please update the hashes.

- **ID:** `python/pip-invalid-requirement-hash-mismatch`
- **Domain:** python
- **Category:** install_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

The downloaded wheel/sdist SHA256 does not match the hash pinned in requirements.txt, either because the file was re-uploaded, the mirror serves a different build, or the hash line is stale.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.8 | active | — | — |
| 3.9 | active | — | — |
| 3.10 | active | — | — |
| 3.11 | active | — | — |
| 3.12 | active | — | — |

## Workarounds

1. **** (95% success)
   ```
   Regenerate the hashes with pip-tools:
  pip install pip-tools
  pip-compile --generate-hashes requirements.in
Then install:
  pip install -r requirements.txt
   ```
2. **** (90% success)
   ```
   If you intentionally want to skip hashes temporarily, remove the --hash lines or the --require-hashes flag from the install command.
   ```

## Dead Ends

- **** — --no-deps skips dependency resolution, not hash verification; the check still runs. (90% fail)
- **** — --trusted-host only disables TLS verification, not hash verification. (95% fail)