Collecting urllib3==2.5.0
  Downloading urllib3-2.5.0-py3-none-any.whl (129 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 129.8/129.8 KB 49.6 MB/s eta 0:00:00
Collecting importlib_resources~=5.7
ERROR: In --require-hashes mode, all requirements must have their versions pinned with ==. These do not:
    importlib_resources~=5.7 from https://files.pythonhosted.org/packages/7a/68/bd9dd6bbf06772c7accce77d0354d783333fbe712a60b08fc13540c05422/importlib_resources-5.13.0-py3-none-any.whl#sha256=9f7bd0c97b79972a6cce36a366356d16d5e13b09679c11a58f1014bfdf8e64b2 (from sigstore==4.1.0->-r /home/runner/work/_actions/sigstore/gh-action-sigstore-python/v3.1.0/requirements/main.txt (line 481))