`pip download` selects different package to `pip install`

[ubermidget2]

Description

pip download (found using cryptography) selects a different package (manylinux_2_28) compared to pip install (manylinux_2_17)

Expected behavior

Download and Install select the same compatible package for the system

pip version

25.1.1

Python version

3.9.5

OS

Ubuntu 20.04

How to Reproduce

1. pip cache purge
2. pip download cryptography
3. pip cache purge
4. pip install cryptography

Output

$ pip download cryptography
Files removed: 18 (5.3 MB)
$ pip download cryptography
Collecting cryptography
Downloading cryptography-45.0.5-cp37-abi3-manylinux_2_28_aarch64.whl.metadata (5.7 kB)
Collecting cffi>=1.14 (from cryptography)
Downloading cffi-1.17.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.metadata (1.5 kB)
Collecting pycparser (from cffi>=1.14->cryptography)
Downloading pycparser-2.22-py3-none-any.whl.metadata (943 bytes)
Downloading cryptography-45.0.5-cp37-abi3-manylinux_2_28_aarch64.whl (4.2 MB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.2/4.2 MB 6.1 MB/s eta 0:00:00
Downloading cffi-1.17.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (447 kB)
Downloading pycparser-2.22-py3-none-any.whl (117 kB)
Saved ./cryptography-45.0.5-cp37-abi3-manylinux_2_28_aarch64.whl
Saved ./cffi-1.17.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Saved ./pycparser-2.22-py3-none-any.whl
Successfully downloaded cryptography cffi pycparser
$ pip cache purge
Files removed: 18 (5.3 MB)
$ pip --verbose install cryptography | egrep "cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl|cryptography-45.0.5-cp37-abi3-manylinux_2_28_aarch64.whl"
Found link https://files.pythonhosted.org/packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl#sha256=3fcfbefc4a7f332dece7272a88e410f611e79458fab97b5efe14e54fe476f4fd (from https://pypi.org/simple/cryptography/) (requires-python:!=3.9.0,!=3.9.1,>=3.7), version: 45.0.5
Skipping link: none of the wheel's tags match: cp37-abi3-manylinux_2_28_aarch64: https://files.pythonhosted.org/packages/3e/6a/cb8b5c8bb82fafffa23aeff8d3a39822593cee6e2f16c5ca5c2ecca344f7/cryptography-45.0.5-cp37-abi3-manylinux_2_28_aarch64.whl#sha256=9b4cf6318915dccfe218e69bbec417fdd7c7185aa7aab139a2c0beb7468c89f0 (from https://pypi.org/simple/cryptography/) (requires-python:!=3.9.0,!=3.9.1,>=3.7)
Looking up "https://files.pythonhosted.org/packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl" in the cache
https://files.pythonhosted.org:443 "GET /packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl HTTP/1.1" 200 4197780
Downloading cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl (4.2 MB)
Updating cache with response from "https://files.pythonhosted.org/packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl"
Added cryptography from https://files.pythonhosted.org/packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl#sha256=3fcfbefc4a7f332dece7272a88e410f611e79458fab97b5efe14e54fe476f4fd to build tracker '/tmp/pip-req-tracker-gqnqdu1j'
Removed cryptography from https://files.pythonhosted.org/packages/c2/e7/2187be2f871c0221a81f55ee3105d3cf3e273c0a0853651d7011eada0d7e/cryptography-45.0.5-cp37-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl#sha256=3fcfbefc4a7f332dece7272a88e410f611e79458fab97b5efe14e54fe476f4fd from build tracker '/tmp/pip-req-tracker-gqnqdu1j'

Code of Conduct

• I agree to follow the PSF Code of Conduct.

[ubermidget2]

In case someone else runs into this, I was having a pip version mismatch between the downloading and installing side.

Making sure to run 25.1.1 on both sides sorted it out.

[notatallshaw]

Thanks for the update! Sorry no one has time to troubleshoot.