Fix a recent regression in package identity. At this point (until we change the semantics), an explicitly provided name in a package dependency is _not_ used as the identity. It is validated against what the package manifest claims, but does not currently constitute the identity.

rdar://problem/70764221

Author: abertelrud

Sources/PackageGraph/PackageModel+Extensions.swift

@@ -17,11 +17,13 @@ extension PackageDependencyDescription {
         let effectiveURL = config.mirroredURL(forURL: url)
 
         // FIXME: The identity of a package dependency is currently based on
-        //        the explicit name provided in the package manifest, if provided,
-        //        falling back on a name computed from its effective URL.
-        //        We should instead use the declared URL of a package dependency as its identity,
-        //        as it will be necessary for supporting package registries.
-        let identity = explicitName?.lowercased() ?? PackageReference.computeIdentity(packageURL: effectiveURL)
+        //        on a name computed from the package's effective URL.  This
+        //        is because the name of the package that's in the manifest
+        //        is not known until the manifest has been parsed.
+        //        We should instead use the declared URL of a package dependency
+        //        as its identity, as it will be needed for supporting package
+        //        registries.
+        let identity = PackageReference.computeIdentity(packageURL: effectiveURL)
 
         return PackageReference(
             identity: identity,

Tests/WorkspaceTests/WorkspaceTests.swift

@@ -413,6 +413,66 @@ final class WorkspaceTests: XCTestCase {
             }
         }
     }
+    
+    /// Test that the explicit name given to a package is not used as its identity.
+    func testExplicitPackageNameIsNotUsedAsPackageIdentity() throws {
+        let sandbox = AbsolutePath("/tmp/ws/")
+        let fs = InMemoryFileSystem()
+
+        let workspace = try TestWorkspace(
+            sandbox: sandbox,
+            fs: fs,
+            roots: [
+                TestPackage(
+                    name: "FooPackage",
+                    path: "foo-package",
+                    targets: [
+                        TestTarget(name: "FooTarget", dependencies: [.product(name: "BarProduct", package: "BarPackage")]),
+                    ],
+                    products: [],
+                    dependencies: [
+                        TestDependency(name: "BarPackage", path: "bar-package", requirement: .upToNextMajor(from: "1.0.0")),
+                    ],
+                    toolsVersion: .v5
+                ),
+                TestPackage(
+                    name: "BarPackage",
+                    path: "bar-package",
+                    targets: [
+                        TestTarget(name: "BarTarget"),
+                    ],
+                    products: [
+                        TestProduct(name: "BarProduct", targets: ["BarTarget"]),
+                    ],
+                    versions: ["1.0.0", "1.0.1"]
+                ),
+            ],
+            packages: [
+                TestPackage(
+                    name: "BarPackage",
+                    path: "bar-package",
+                    targets: [
+                        TestTarget(name: "BarTarget"),
+                    ],
+                    products: [
+                        TestProduct(name: "BarProduct", targets: ["BarTarget"]),
+                    ],
+                    versions: ["1.0.0", "1.0.1"]
+                ),
+            ]
+        )
+
+        workspace.checkPackageGraph(roots: ["foo-package", "bar-package"], dependencies: [PackageDependencyDescription(url: "/tmp/ws/pkgs/bar-package", requirement: .upToNextMajor(from: "1.0.0"), productFilter: .everything)]) { (graph, diagnostics) in
+            PackageGraphTester(graph) { result in
+                result.check(roots: "FooPackage", "BarPackage")
+                result.check(packages: "FooPackage", "BarPackage")
+                result.checkTarget("FooTarget") { result in result.check(dependencies: "BarProduct") }
+            }
+            XCTAssertNoDiagnostics(diagnostics)
+        }
+    }
+
+
 
     /// Test that the remote repository is not resolved when a root package with same name is already present.
     func testRootAsDependency1() throws {