jarbundler 2.2.0 Unable to verify file checksums

[mario.flrs.mndz@…]

It seems source file cannot be downloaded anymore. It attempts to download a html file instead of a zip file.

[mario.flrs.mndz@…]

log file using -d install

[ryandesign (Ryan Carsten Schmidt)]

There are many problems here.

• The port says the files are in the jarbundler project on SourceForge; no such SourceForge project exists
• The main distfiles mirror doesn't have a copy of the file
• The German mirror has an HTML file jarbundler-2.2.0.zip.html which looks like a generic SourceForge page
• The German mirror is misconfigured in such a way that requesting the nonexistent file jarbundler-2.2.0.zip causes the file jarbundler-2.2.0.zip.html to be delivered; we need to report this misconfiguration to the German mirror's admin and get it fixed
• Version 2.3.1 has been released at a different download URL, but the download URL is unversioned; we need to update the port and explain to the developer why they should use versioned distfiles

[ryandesign (Ryan Carsten Schmidt)]

Replying to ryandesign@…:

• Version 2.3.1 has been released at a different download URL, but the download URL is unversioned; we need to update the port and explain to the developer why they should use versioned distfiles

Actually I see now that ​jarbundler has moved to github. They don't have any downloads there yet, but hopefully once they do they will use versioned filenames.

[b@…]

Cc Me!

[b@…]

a website with some information can be found at ​http://informagen.com/JarBundler/ - however providing only an unversioned download URL

[hmeine (Hans Meine)]

Is the .zip.html thing really only about "the German mirror"? When googling for "Index of /macports/distfiles/jarbundler", I only got hits with .zip.htmls.

[tobias.carl.fischer@…]

Replying to ryandesign@…:

Replying to ryandesign@…:

• Version 2.3.1 has been released at a different download URL, but the download URL is unversioned; we need to update the port and explain to the developer why they should use versioned distfiles

Actually I see now that ​jarbundler has moved to github. They don't have any downloads there yet, but hopefully once they do they will use versioned filenames.

You can now find versioned releases on the GitHub Releases page: ​https://github.com/UltraMixer/JarBundler/releases However, this depends on the maintainers will to maintain the releases section manually.

But as the JarBundler project is now a maven project, all downloads can also be accessed at the maven central repository page:

• ​http://mvnrepository.com/artifact/com.ultramixer.jarbundler
• ​http://mvnrepository.com/artifact/com.ultramixer.jarbundler/jarbundler-core
• ​http://mvnrepository.com/artifact/com.ultramixer.jarbundler/jarbundler-core/3.3.0
• ​http://central.maven.org/maven2/com/ultramixer/jarbundler/jarbundler-core/3.3.0/jarbundler-core-3.3.0.jar

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #50648.

[ryandesign (Ryan Carsten Schmidt)]

Replying to hans_meine@…:

Is the .zip.html thing really only about "the German mirror"? When googling for "Index of /macports/distfiles/jarbundler", I only got hits with .zip.htmls.

The existence of the .zip.html files was not unique to the German mirror; all mirrors should have the same content, more or less. But there was a misconfiguration of the German mirror which caused it to deliver the .zip.html file when the nonexistent .zip file was requested. This misconfiguration was corrected.

[bouttier__macports@…]

Cc Me!

[bouttier__macports@…]

Hi,

I have possibly a similar problem with another mirror :

--->  Attempting to fetch jarbundler-2.2.0.zip from http://freefr.dl.sourceforge.net/jarbundler
--->  Verifying checksums for jarbundler                                        
Error: Checksum (md5) mismatch for jarbundler-2.2.0.zip
Error: Checksum (sha1) mismatch for jarbundler-2.2.0.zip
Error: Checksum (rmd160) mismatch for jarbundler-2.2.0.zip
***
The non-matching file appears to be HTML. See this page for possible reasons
for the checksum mismatch:
<https://trac.macports.org/wiki/MisbehavingServers>
***

[ryandesign (Ryan Carsten Schmidt)]

Yes, we know. As I said above, the files the port is trying to download no longer exist on SourceForge. We need to update the port.

[bouttier__macports@…]

Replying to ryandesign@…:

We need to update the port.

Is there hope to see this done in a reasonably close future ? jarbundler is a dependency for JabRef which I need...

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #51870.

[chicagotripp (Altoine Barker)]

Portfile diff file to bump version from 2.2.0 to 2.3.1.

[mf2k (Frank Schima)]

Thanks. The sha1 checksum should be replaced with a sha256 checksum.

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #54626.

The attached patch uses an unversioned distfile, which is undesirable.

[ryandesign (Ryan Carsten Schmidt)]

As mentioned above, version 3.3.0 is available on GitHub so we should update the port to that version.

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #55741.

[ryandesign (Ryan Carsten Schmidt)]

In b7124d64855cf1e3c098609acd1bf3e5cbb5ee8b/macports-ports (master):

jarbundler: Update to 3.3.0

Closes: #48791