build: use --generate-hashes when pinning

nedbat · nedbat · commit ab4db406a9c3 · 2026-03-14T14:11:29.000-04:00
diff --git a/Makefile b/Makefile
@@ -130,7 +130,7 @@ KITBIN = .tox/$(KITVER)/bin
 $(KITBIN):
 	tox -q -e $(KITVER) --notest
 
-PIP_COMPILE = uv pip compile -q --universal ${COMPILE_OPTS}
+PIP_COMPILE = uv pip compile -q --universal --generate-hashes ${COMPILE_OPTS}
 
 # Limit to packages that were released more than 10 days ago.
 # https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
