[gentoo-dev] heads up: codeberg changed gzip impls (?) for ${REPO}/archive/${TAG}.tar.gz files

["Arsen Arsenović" <arsen@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1142 bytes --]

hi,

it seems that codeberg has changed how they produce their archives on
URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
to digest failures like <https://bugs.gentoo.org/919135>, as implied by
the following checks:

  ~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d)
  ~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat)
  Binary files /dev/fd/63 and /dev/fd/62 differ

the above shows that compressed content differs while decompressed
content remains identical.

(dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror,
/var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
around two in the morning last night)

you might want to regenerate manifests for projects fetching from
/archive/ urls on codeberg.

Daniel, thank you for working on foot.  may I ask that you attach 'meson
dist'-generated files to releases?  you could also use that opportunity
to hash or sign them, if you so desire.

in either case, thank you again.

have a lovely day, all!
-- 
Arsen Arsenović

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 381 bytes --]