Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

source checksum #95

Open
theamericanaccount opened this issue Oct 30, 2024 · 2 comments
Open

source checksum #95

theamericanaccount opened this issue Oct 30, 2024 · 2 comments

Comments

@theamericanaccount
Copy link

hello,
ive noticed a discrepancy between the source checksum on here and in the archlinux pkgbuild.
from both mine and arch tree it results the checksum should be another and it should have not changed since 2023.
my sources are published at
https://github.com/themartiancompany/python-sphinxcontrib-towncrier-ur
both my builds and arch one are from way later source publishing and no change seems have been going on github since then so I was wondering how and why the checksum changed.
im puzzled how the package actually built in the first place.
has there been a forced repo update?

@webknjaz
Copy link
Member

Assuming you're talking about Git archive, this might be related to setuptools-scm. Otherwise, there's not enough context to make meaningful educated guesses.
The distribution can be built using any standard PEP 517 build frontend.

@theamericanaccount
Copy link
Author

theamericanaccount commented Nov 3, 2024

I'm talking about the released source tarball here on Github.
I have changed my sources to use the Pypi one because I remembered it doesn't allow for re-releases and it also reports the checksum as I didn't want to check all the source.
The checksum of the tarball must have changed months after their publication anyway.
I have checked your CI logs and they also report the file should have not changed.
I had never stumbled onto such a weird situation myself.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants