[Bug]: wheels bundled in ensurepip are not valid wheels #1272

Describe the bug

The pip wheel bundled in ensurepip is patched by graalpy but the RECORD file is not updated with new sha256 for patched files.

I came across the issue while trying to patch pip wheels in ensurepip with a version of certifi that does not embed the compromised eMudhra intermediate CA certificates.

For older versions, it likely applies to setuptools as well.

Operating system

Linux

CPU architecture

x86_64

GraalPy version

graalpy-24.2.2, graalpy-25.0.3, graalpy3.12-25.2.4, graalpy3.13-25.4.4

JDK version

No response

Context configuration

No response

Steps to reproduce

wheel unpack /opt/_internal/graalpy313-graalpy253_313_native/lib/python3.13/ensurepip/_bundled/pip-26.1.2-py3-none-any.whl
Unpacking to: pip-26.1.2...Hash mismatch for file 'pip/_internal/cli/cmdoptions.py'

Expected behavior

wheel unpacked without error

Stack trace

Additional context

No response