google / flatbuffers

FlatBuffers: Memory Efficient Serialization Library
https://flatbuffers.dev/
Apache License 2.0
23.16k stars 3.23k forks source link

Requesting a stable download url #8364

Open BYVoid opened 2 months ago

BYVoid commented 2 months ago

Hi Flatbuffers team,

The download url https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz does not guarantee a stable checksum. Please create a locally generated tar.gz file and upload it to ensure the archive checksum stability.

Here is the warning from Bazel central registry.

BcrValidationResult.FAILED: flatbuffers@24.3.25 is using an unstable source url: `https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz`.
--
  | You should use a release archive URL in the format of `https://github.com/<ORGANIZATION>/<REPO>/releases/download/<version>/<name>.tar.gz` to ensure the archive checksum stability.
  | See https://blog.bazel.build/2023/02/15/github-archive-checksum.html for more context.