[Bug]: the version of xlsxwriter package is yanked

[wj-Mcat]

Is there an existing issue for the same bug? (If one exists, thumbs up or comment on the issue instead).

• I have checked the existing issues.

Describe the bug and reproduction steps

When I clone and run the swe evaluation, there are installing errors when building the runtime docker image.

After debugging, found this bug.

OpenHands Installation

Docker command in README

OpenHands Version

main

Model Name

gpt-4.1

Operating System

Linux

Logs, Errors, Screenshots, and Additional Context

The error info in image building log file:

#16 37.19   KeyError
#16 37.19 
#16 37.19   'hash'
#16 37.19 
#16 37.19   at /openhands/micromamba/envs/openhands/lib/python3.12/site-packages/poetry/installation/chooser.py:188 in _get_links
#16 37.20       184│         else:
#16 37.20       185│             repository = self._pool.repository("pypi")
#16 37.20       186│         links = repository.find_links_for_package(package)
#16 37.20       187│ 
#16 37.20     → 188│         locked_hashes = {f["hash"] for f in package.files}
#16 37.20       189│         if not locked_hashes:
#16 37.20       190│             return links
#16 37.20       191│ 
#16 37.20       192│         selected_links = []
#16 37.20 
#16 37.20 Cannot install xlsxwriter.
#16 37.20 
#16 ERROR: process "/bin/sh -c /openhands/micromamba/bin/micromamba run -n openhands poetry install --only main --no-interaction --no-root" did not complete successfully: exit code: 1
------
 > [12/21] RUN /openhands/micromamba/bin/micromamba run -n openhands poetry install --only main --no-interaction --no-root:
37.20       186│         links = repository.find_links_for_package(package)
37.20       187│ 
37.20     → 188│         locked_hashes = {f["hash"] for f in package.files}
37.20       189│         if not locked_hashes:
37.20       190│             return links
37.20       191│ 
37.20       192│         selected_links = []
37.20 
37.20 Cannot install xlsxwriter.
37.20 
------
Dockerfile:88