Opened 2 years ago

Closed 2 years ago

#64538 closed defect (fixed)

py-requests-file @1.5.1: checksum mismatch

Reported by: ryandesign (Ryan Carsten Schmidt) Owned by: Schamschula (Marius Schamschula)
Priority: Normal Milestone:
Component: ports Version: 2.7.1
Keywords: Cc:
Port: py-requests-file

Description

[8b6ca8a969c2c8ca228de238091256b761e5378b/macports-ports] changed where the port downloads from (used to be from github; is now from pypi) thereby effectively causing a stealth update:

$ sudo port fetch --no-mirrors py310-requests-file
--->  Fetching distfiles for py310-requests-file
--->  Attempting to fetch requests-file-1.5.1.tar.gz from https://files.pythonhosted.org/packages/source/r/requests-file
$ sudo port checksum py310-requests-file
--->  Verifying checksums for py310-requests-file
Error: Checksum (rmd160) mismatch for requests-file-1.5.1.tar.gz
Error: Checksum (sha256) mismatch for requests-file-1.5.1.tar.gz
Error: Checksum (size) mismatch for requests-file-1.5.1.tar.gz
Error: Failed to checksum py310-requests-file: Unable to verify file checksums

You should probably fix this by reverting the change and go back to fetching from github. If there is an advantage to not fetching from github, maybe the next time the port needs to be updated to a new version would be a good time to do that.

Change History (3)

comment:1 Changed 2 years ago by Schamschula (Marius Schamschula)

Hmm. I did check the download before committing.

comment:2 Changed 2 years ago by Schamschula (Marius Schamschula)

I made the change to follow standard python protocol, rather than keeping the github PG.

comment:3 Changed 2 years ago by ryandesign (Ryan Carsten Schmidt)

Resolution: fixed
Status: assignedclosed

In 448e494d5ee357b4b679bdd16f35623208c48ae1/macports-ports (master):

py-requests-file: Fix checksum mismatch

Revert part of the preceding commit and go back to using the github
portgroup for now to fix the checksum mismatch that the preceding commit
caused (by causing the distfile to fetch from pypi which serves a
different file than GitHub). The github portgroup can be removed (and
fetching can go back to using pypi) if desired when the port is updated
to a new version.

Closes: #64538

Note: See TracTickets for help on using tickets.