py311-numba @0.58.0 checksum error

[gwright83]

py311-numba version 0.58.0_0 has a checksum error:

:notice:checksum --->  Verifying checksums for py311-numba
:debug:checksum Executing org.macports.checksum (py311-numba)
:info:checksum --->  Checksumming numba-0.58.0.tar.gz
:debug:checksum Calculated (rmd160) is 8a1835c6a4764e5b8e57ba8a37f2bce064c87089
:error:checksum Checksum (rmd160) mismatch for numba-0.58.0.tar.gz
:info:checksum Portfile checksum: numba-0.58.0.tar.gz rmd160 02d12eb84ad4a4ef29ba0ef540db18c09bdad880
:info:checksum Distfile checksum: numba-0.58.0.tar.gz rmd160 8a1835c6a4764e5b8e57ba8a37f2bce064c87089
:debug:checksum Calculated (sha256) is a9b0d9e7a14bbb2a378330ba2f4612bb24e44df7a96a763b938b7c497fb09c52
:error:checksum Checksum (sha256) mismatch for numba-0.58.0.tar.gz
:info:checksum Portfile checksum: numba-0.58.0.tar.gz sha256 092c21b4f832ad18a34b1408f7f411ce29bc7b7b3be18a824ad41c3553466a66
:info:checksum Distfile checksum: numba-0.58.0.tar.gz sha256 a9b0d9e7a14bbb2a378330ba2f4612bb24e44df7a96a763b938b7c497fb09c52
:debug:checksum Calculated (size) is 2691727
:error:checksum Checksum (size) mismatch for numba-0.58.0.tar.gz
:info:checksum Portfile checksum: numba-0.58.0.tar.gz size 2691724
:info:checksum Distfile checksum: numba-0.58.0.tar.gz size 2691727
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  8a1835c6a4764e5b8e57ba8a37f2bce064c87089 \
:info:checksum                     sha256  a9b0d9e7a14bbb2a378330ba2f4612bb24e44df7a96a763b938b7c497fb09c52 \
:info:checksum                     size    2691727
:error:checksum Failed to checksum py311-numba: Unable to verify file checksums

Looks like someone changed something without bumping the version.

[jmroot (Joshua Root)]

This is using a github-generated tarball, which is not guaranteed to never change (the actual files shouldn't change but things like enclosing directory names and metadata might). I'm not sure if there's a good reason why it's doing that instead of just using the tarball from PyPI. If it has to keep using github for some reason, it should at least set github.tarball_from archive to improve the stability of the file. It might be easiest to update to 0.58.1 at the same time, as otherwise this will have to be handled as a stealth update.

[jmroot (Joshua Root)]

In ee949483de792fbbbf1bcdaa0547c8feefa4e3cd/macports-ports (master):

py-numba: update to 0.58.1, fetch from pypi

Avoiding the dynamically generated tarball from github should avoid
further checksum mismatches.

Closes: #68546