search

ali5h / rules_pip

pip package rules for bazel that are fast (incremental fetch), support different python versions and work with all kinds of packages (i.e. packages with namespaces)
MIT License
60 stars 23 forks source link

sha256 mismatch? #83

Closed AHassanSOS closed 1 year ago

AHassanSOS commented 1 year ago

Hi team:

The rules for the package has the following sha256:

http_archive(
    name = "com_github_ali5h_rules_pip",
    strip_prefix = "rules_pip-3.0.0",
    sha256 = "630a7cab43a87927353efca116d20201df88fb443962bf01c7383245c7f3a623",
    urls = ["https://github.com/ali5h/rules_pip/archive/3.0.0.tar.gz"],
)

The sha256 of the file is 630a7cab43a87927353efca116d20201df88fb443962bf01c7383245c7f3a623

When I download it, I get a different one 2a9be75273b175b8546234674f6748525de8dd74752646d9df6285735a8e10d0

(base) ahmed@rapidsos:/tmp/test$ wget https://github.com/ali5h/rules_pip/archive/3.0.0.tar.gz
--2023-01-30 16:15:26--  https://github.com/ali5h/rules_pip/archive/3.0.0.tar.gz
Resolving github.com (github.com)... 140.82.113.3
Connecting to github.com (github.com)|140.82.113.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://codeload.github.com/ali5h/rules_pip/tar.gz/refs/tags/3.0.0 [following]
--2023-01-30 16:15:26--  https://codeload.github.com/ali5h/rules_pip/tar.gz/refs/tags/3.0.0
Resolving codeload.github.com (codeload.github.com)... 140.82.113.10
Connecting to codeload.github.com (codeload.github.com)|140.82.113.10|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2069443 (2.0M) [application/x-gzip]
Saving to: ‘3.0.0.tar.gz’

3.0.0.tar.gz                                  100%[==============================================================================================>]   1.97M  4.61MB/s    in 0.4s    

2023-01-30 16:15:27 (4.61 MB/s) - ‘3.0.0.tar.gz’ saved [2069443/2069443]

(base) ahmed@rapidsos:/tmp/test$ sha256sum 3.0.0.tar.gz 
2a9be75273b175b8546234674f6748525de8dd74752646d9df6285735a8e10d0  3.0.0.tar.gz

Did you update the old rules?

AHassanSOS commented 1 year ago

This was an issue by github. They changed the way they generate tar.gz files. Here is the thread: https://github.com/orgs/community/discussions/45830