You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The reason will be displayed to describe this comment to others. Learn more.
I think the manual archive cannot be used here, because when the next version releases, homebrew will try to find 1.1.9 archive also from the manual link form and there not exist.
The reason will be displayed to describe this comment to others. Learn more.
It is said that the github archives generated from tags are not stable (sha256 sometimes change).
Where did you read this? If this is true, the Homebrew maintainers would be very interested, as the majority of formulae use tag URLs for GitHub-hosted source tarballs.
AFAIK, tag archive checksums only change when someone re-tags with a different commit, which the man page for git tag very clearly says is "THE INSANE THING" to do.
The reason will be displayed to describe this comment to others. Learn more.
The article explicitly states that GitHub's own checkin that broke tag archive checksums was rolled back. Also, following one of the linked discussions leads to this comment:
If you had only a tag with no associated release, you should still expect to have a consistent checksum for the archives at /archive/refs/tags/$tag.
In summary: It is safe to reference archives of any kind via the /refs/tags endpoint, everything else enjoys no guarantees.
451cb42
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It is said that the github archives generated from tags are not stable (sha256 sometimes change).
So I created
https://github.com/BYVoid/OpenCC/releases/download/ver.1.1.8/opencc-1.1.8.tar.gz
451cb42
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the manual archive cannot be used here, because when the next version releases, homebrew will try to find 1.1.9 archive also from the manual link form and there not exist.
451cb42
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Where did you read this? If this is true, the Homebrew maintainers would be very interested, as the majority of formulae use tag URLs for GitHub-hosted source tarballs.
AFAIK, tag archive checksums only change when someone re-tags with a different commit, which the man page for
git tag
very clearly says is "THE INSANE THING" to do.451cb42
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Here is the link: https://blog.bazel.build/2023/02/15/github-archive-checksum.html
451cb42
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The article explicitly states that GitHub's own checkin that broke tag archive checksums was rolled back. Also, following one of the linked discussions leads to this comment: