FS#79226 - [python-yaml] checksum mismatch

Attached to Project: Arch Linux
Opened by Xeonacid (Xeonacid) - Friday, 28 July 2023, 08:29 GMT
Last edited by David Runge (dvzrv) - Friday, 28 July 2023, 22:13 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Lukas Fleischer (lfleischer)
David Runge (dvzrv)
Levente Polyak (anthraxx)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

==> Building in chroot for [extra] (x86_64)...
==> Synchronizing chroot copy [/var/lib/archbuild/extra-x86_64/root] -> [xeonacid]...done
==> Making package: python-yaml 6.0.1-1 (Fri Jul 28 10:25:42 2023)
==> Retrieving sources...
-> Downloading PyYAML-6.0.1.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
100 117k 0 117k 0 0 216k 0 --:--:-- --:--:-- --:--:-- 216k
==> Validating source files with sha512sums...
PyYAML-6.0.1.tar.gz ... FAILED
==> ERROR: One or more files did not pass the validity check!
==> ERROR: Could not download sources.

A patch is in attachment.
This task depends upon

Closed by  David Runge (dvzrv)
Friday, 28 July 2023, 22:13 GMT
Reason for closing:  Fixed
Additional comments about closing:  Fixed with python-yaml 6.0.1-2
Comment by David Runge (dvzrv) - Friday, 28 July 2023, 21:51 GMT
@Xeonacid: Thanks for the report!

Hmm, this is major weird. I have a tarball from 2023-07-26 that has the checksums as described in the PKGBUILD.
The only difference seems to be that my tarball has different ownership on the contained files (`runner:docker` instead of `root:root`).

I'll get in touch with upstream to clarify this.
Comment by David Runge (dvzrv) - Friday, 28 July 2023, 22:08 GMT
Ugh, nevermind. It seems the tarball was downloaded from PyPI before I changed the PKGBUILD /o\