Expect `uv publish` to generate a `blake2b-256` hash value and send it to the server

[wenxue202012]

Summary

Expect uv publish to generate a blake2b-256 hash value and send it to the server

Example

https://github.com/astral-sh/uv/blob/main/crates/uv-publish/src/lib.rs#L739

Adding the passing of the blake2_256_digest parameter value.

[zanieb]

Can you share why you expect, need, or want this?

[wenxue202012]

The CNB artifact repository （https://cnb.cool） I'm using checks on the server side whether the blake2b hash is empty, and the relative path used for pip install is based on the blake2b hash.

​​Like Poetry、Hatch and Twine, all have blake2b hash values.​​
@zanieb

[woodruffw]

Hi @wenxue202012, thanks for opening an issue.

I don't see any harm to us supporting blake2 hashes in the upload payload, but I'll note: PyPI itself doesn't require this field (or even SHA256), so your third-party index should probably not require them. Would you be able to reach out to them first and see whether they can fix their consistency with PyPI?