3.2.5 tarball changed at some point?
(1) By Mitchell Blank (mitchblank) on 2020-12-24 02:38:06 [source]
I have been investigating issues with Homebrew formulae that don't build properly from source. One of these is mysql++. This is because the tarball does not have the expected contents (homebrew is very strict about this for security reasons -- it won't use any external resource if its hash doesn't match what was expected)
Anyway, when I try to install I see:
$ brew install -sv mysql++
[...]
==> Downloading https://tangentsoft.com/mysqlpp/releases/mysql++-3.2.5.tar.gz
[...]
Error: SHA256 mismatch
Expected: b780beeb3a9cd9ce6a9043028527484df8e822c58c5274d4d67ec5ba2fc0a778
Actual: 839cfbf71d50a04057970b8c31f4609901f5d3936eaa86dab3ede4905c4db7a8
File: /Users/mitch/Library/Caches/Homebrew/downloads/e9e3e589ee7dc87f8942aba0e9c436a8adfb6815333ab4055dec8df1fa4078c4--mysql -3.2.5.tar.gz
The expected sha256 value was current as of 2019-07-22 when homebrew upgraded to the 3.2.5 release: https://github.com/Homebrew/homebrew-core/pull/42298/files
However looking at https://tangentsoft.com/mysqlpp/releases/ the tarball has a modification date of 2020-02-27
Can the mysql++ project verify that they intentionally republished a modified tarball and the new contents are the "official" 3.2.5 now?
(2) By Warren Young (tangent) on 2021-01-08 06:50:58 in reply to 1 [link] [source]
It was republished to fix a Doxygen viewing problem due to unpackaged files. The current hash has remained the same since then, the tarball being regenerated that same day.
(3) By Mitchell Blank (mitchblank) on 2021-01-08 13:35:49 in reply to 2 [link] [source]
OK I have pushed an update PR to Homebrew; hopefully they'll take it up soon https://github.com/Homebrew/homebrew-core/pull/68566