Create a test verifying bundled pip and setuptools wheels

[illia-v]

BPO	47016
Nosy	@ned-deily, @pablogsal, @illia-v
PRs	gh-91172: Create a workflow for verifying bundled pip and setuptools #31885

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2022-03-14.21:21:37.673>
labels = ['3.7', '3.8', '3.9', '3.10', '3.11', 'type-feature', 'library']
title = 'Create a test verifying bundled pip and setuptools wheels'
updated_at = <Date 2022-03-14.23:27:54.092>
user = 'https://github.com/illia-v'

bugs.python.org fields:

activity = <Date 2022-03-14.23:27:54.092>
actor = 'AlexWaygood'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['Library (Lib)']
creation = <Date 2022-03-14.21:21:37.673>
creator = 'illia-v'
dependencies = []
files = []
hgrepos = []
issue_num = 47016
keywords = ['patch']
message_count = 1.0
messages = ['415193']
nosy_count = 3.0
nosy_names = ['ned.deily', 'pablogsal', 'illia-v']
pr_nums = ['31885']
priority = 'normal'
resolution = None
stage = 'patch review'
status = 'open'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue47016'
versions = ['Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

[illia-v]

Bundled pip and setuptools wheels have to be verified manually at the moment when they are upgraded.
We can automate this by comparing their checksums to ones provided by Warehouse’s JSON API (e.g., https://pypi.org/pypi/pip/json.)

Since such a check requires network activity and not to slow down tests, creating a GitHub Actions workflow that runs only when the files are changed is a good option.

I suggested this in #30178 (comment) originally.