hi,
it seems that codeberg has changed how they produce their archives on
URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
to digest failures like <https://bugs.gentoo.org/919135>, as implied by
the following checks:
~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d)
~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat)
Binary files /dev/fd/63 and /dev/fd/62 differ
the above shows that compressed content differs while decompressed
content remains identical.
(dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror,
/var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
around two in the morning last night)
you might want to regenerate manifests for projects fetching from
/archive/ urls on codeberg.
Daniel, thank you for working on foot. may I ask that you attach 'meson
dist'-generated files to releases? you could also use that opportunity
to hash or sign them, if you so desire.
in either case, thank you again.
have a lovely day, all!
--
Arsen Arsenovi?
it seems that codeberg has changed how they produce their archives on
URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
to digest failures like <https://bugs.gentoo.org/919135>, as implied by
the following checks:
~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d)
~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat)
Binary files /dev/fd/63 and /dev/fd/62 differ
the above shows that compressed content differs while decompressed
content remains identical.
(dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror,
/var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
around two in the morning last night)
you might want to regenerate manifests for projects fetching from
/archive/ urls on codeberg.
Daniel, thank you for working on foot. may I ask that you attach 'meson
dist'-generated files to releases? you could also use that opportunity
to hash or sign them, if you so desire.
in either case, thank you again.
have a lovely day, all!
--
Arsen Arsenovi?