go-tools @0.5.0: Checksum mismatch

[6aKa]

--->  Computing dependencies for go-tools
--->  Fetching archive for go-tools
--->  Attempting to fetch go-tools-0.5.0_0.darwin_22.arm64.tbz2 from https://fra.de.packages.macports.org/go-tools
--->  Attempting to fetch go-tools-0.5.0_0.darwin_22.arm64.tbz2 from https://nue.de.packages.macports.org/go-tools
--->  Attempting to fetch go-tools-0.5.0_0.darwin_22.arm64.tbz2 from https://packages.macports.org/go-tools
--->  Verifying checksums for go-tools
Error: Checksum (rmd160) mismatch for tools-0.5.0.tar.gz
Error: Checksum (sha256) mismatch for tools-0.5.0.tar.gz
Error: Checksum (size) mismatch for tools-0.5.0.tar.gz
Error: Failed to checksum go-tools: Unable to verify file checksums
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_devel_go-tools/go-tools/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.

From log

:notice:checksum --->  Verifying checksums for go-tools
:debug:checksum Executing org.macports.checksum (go-tools)
:info:checksum --->  Checksumming tools-0.5.0.tar.gz
:debug:checksum Calculated (rmd160) is 09936c4a3a89ab752fecdde516772655957245f3
:error:checksum Checksum (rmd160) mismatch for tools-0.5.0.tar.gz
:info:checksum Portfile checksum: tools-0.5.0.tar.gz rmd160 a94af765be1caefb2749a8be8525e7be1aa18b2a
:info:checksum Distfile checksum: tools-0.5.0.tar.gz rmd160 09936c4a3a89ab752fecdde516772655957245f3
:debug:checksum Calculated (sha256) is 9bb9c15938a54efe883bddf5d54513e6076639b9dc4a46de7a5a042c3d6b6cfa
:error:checksum Checksum (sha256) mismatch for tools-0.5.0.tar.gz
:info:checksum Portfile checksum: tools-0.5.0.tar.gz sha256 1b5f80eb6da71afba18c7d4327d4913cfb9b6a0840ebb33006e3b9eccec12412
:info:checksum Distfile checksum: tools-0.5.0.tar.gz sha256 9bb9c15938a54efe883bddf5d54513e6076639b9dc4a46de7a5a042c3d6b6cfa
:debug:checksum Calculated (size) is 3281033
:error:checksum Checksum (size) mismatch for tools-0.5.0.tar.gz
:info:checksum Portfile checksum: tools-0.5.0.tar.gz size 2565991
:info:checksum Distfile checksum: tools-0.5.0.tar.gz size 3281033
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  09936c4a3a89ab752fecdde516772655957245f3 \
:info:checksum                     sha256  9bb9c15938a54efe883bddf5d54513e6076639b9dc4a46de7a5a042c3d6b6cfa \
:info:checksum                     size    3281033
:error:checksum Failed to checksum go-tools: Unable to verify file checksums

[jmroot (Joshua Root)]

The file mirrored on distfiles.macports.org has the checksums listed in the Portfile. Fetching from GitHub gives a different file:

% sudo port -v fetch --no-mirror go-tools
--->  Fetching distfiles for go-tools
--->  tools-0.5.0.tar.gz does not exist in /opt/local/var/macports/distfiles/go
--->  Attempting to fetch tools-0.5.0.tar.gz from https://github.com/golang/tools/archive/v0.5.0
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 3204k    0 3204k    0     0  2267k      0 --:--:--  0:00:01 --:--:-- 3699k
% sudo port -v checksum go-tools         
--->  Verifying checksums for go-tools
--->  Checksumming tools-0.5.0.tar.gz
Error: Checksum (rmd160) mismatch for tools-0.5.0.tar.gz
Portfile checksum: tools-0.5.0.tar.gz rmd160 a94af765be1caefb2749a8be8525e7be1aa18b2a
Distfile checksum: tools-0.5.0.tar.gz rmd160 09936c4a3a89ab752fecdde516772655957245f3
Error: Checksum (sha256) mismatch for tools-0.5.0.tar.gz
Portfile checksum: tools-0.5.0.tar.gz sha256 1b5f80eb6da71afba18c7d4327d4913cfb9b6a0840ebb33006e3b9eccec12412
Distfile checksum: tools-0.5.0.tar.gz sha256 9bb9c15938a54efe883bddf5d54513e6076639b9dc4a46de7a5a042c3d6b6cfa
Error: Checksum (size) mismatch for tools-0.5.0.tar.gz
Portfile checksum: tools-0.5.0.tar.gz size 2565991
Distfile checksum: tools-0.5.0.tar.gz size 3281033

[ryandesign (Ryan Carsten Schmidt)]

The checksums in the port match the tag named "gopls/v0.5.0" which was created September 15, 2020. The port does not specify to use the "gopls/v" prefix but I guess GitHub somehow inferred that that was what we meant.

But the port was updated to this version on January 4, 2023, which was when the tag "v0.5.0" was created. That's presumably what the port was intended to use, but for whatever reason didn't. Maybe there was a bug at the time in how GitHub was serving files which has since been corrected.

This will need to be handled as a stealth update with revision increase to get the port to the correct 0.5.0.

[ryandesign (Ryan Carsten Schmidt)]

Replying to ryandesign:

But the port was updated to this version on January 4, 2023

Herby, this was your commit. Maybe you can fix it? See my comment above.

[ryandesign (Ryan Carsten Schmidt)]

Looks like v0.6.0 was released two weeks ago; simply updating to that version should also resolve the issue.

[ryandesign (Ryan Carsten Schmidt)]

[65cc3e887ce0d9af603017e91fa79d22fafdd455/macports-ports]