hi, it seems that codeberg has changed how they produce their archives on URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading to digest failures like <https://bugs.gentoo.org/919135>, as implied by the following checks:
~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d) ~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat) Binary files /dev/fd/63 and /dev/fd/62 differ the above shows that compressed content differs while decompressed content remains identical. (dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror, /var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at around two in the morning last night) you might want to regenerate manifests for projects fetching from /archive/ urls on codeberg. Daniel, thank you for working on foot. may I ask that you attach 'meson dist'-generated files to releases? you could also use that opportunity to hash or sign them, if you so desire. in either case, thank you again. have a lovely day, all! -- Arsen Arsenović
signature.asc
Description: PGP signature
