installer 0.7.0

[dimbleby]

Fixes #7572

explicitly declines to fix #7585, by choosing to call validate_record(), on the grounds that

• failure to install packages that do not validate correctly is what the spec demands: https://packaging.python.org/en/latest/specifications/binary-distribution-format/

installation will fail if any file in the archive is not both mentioned and correctly hashed in RECORD

• anyone who does encounter such a package can fall back to the non-modern installer so they have options while waiting for packages to be fixed

Unless some installer starts enforcing this there'll never be any pressure for anyone to fix their packages, poetry has generally been willing to "go first" on such things (eg see insistence on pep517 builds)

as it happens, this validation also found some errors in poetry's own test fixtures

[github-actions]

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.