checksum of pre built binaries didn't match at v1.14.1

[suzuki-shunsuke]

https://github.com/mesosphere/mindthegap/releases/tag/v1.14.1

Download all assets with GitHub CLI. https://cli.github.com/manual/gh_release_download

gh -R mesosphere/mindthegap release download v1.14.1

Checksum verification with sha256sum fails.

$ sha256sum -c checksums.txt
mindthegap_v1.14.1_darwin_amd64.tar.gz: OK
mindthegap_v1.14.1_darwin_arm64.tar.gz: FAILED
mindthegap_v1.14.1_linux_amd64.tar.gz: OK
mindthegap_v1.14.1_linux_arm64.tar.gz: OK
mindthegap_v1.14.1_windows_amd64.zip: FAILED
mindthegap_v1.14.1_windows_arm64.zip: FAILED
sha256sum: WARNING: 3 computed checksums did NOT match

$ sha256sum -c checksums.txt | grep FAILED
mindthegap_v1.14.1_darwin_arm64.tar.gz: FAILED
mindthegap_v1.14.1_windows_amd64.zip: FAILED
sha256sum: mindthegap_v1.14.1_windows_arm64.zip: FAILED
WARNING: 3 computed checksums did NOT match

checksums.txt

a508cc65d9ca5642ef3cbe1e8965e3a90306452d99953ee25b1873f4389f0e7e  mindthegap_v1.14.1_darwin_amd64.tar.gz
ef809b87ec2452433e60c634d02f2ab37c6a3097aae2e7edec44c5ed8ccd84ad  mindthegap_v1.14.1_darwin_arm64.tar.gz
e4d0fe1bfa4eaef93edfe621d2ab346696be085c9152be430f627c1da03f017b  mindthegap_v1.14.1_linux_amd64.tar.gz
1e4b9386223e64280ac4c2c68b6a337aeb911c7ec5a252fedb76d01972f6c765  mindthegap_v1.14.1_linux_arm64.tar.gz
4d445e1b687ff6cda26dddcb1f0a0ee5de0c2a98249ceb8c36a442c1020a0612  mindthegap_v1.14.1_windows_amd64.zip
3c999ccdbbfed653b0cd842910edb9fd411e0ae5fab0aabc3166113abae97368  mindthegap_v1.14.1_windows_arm64.zip

$ sha256sum *
c60878b8e54fe76b70c5214870986cf64031a8f2934abbc7411cf73324bc2faa  checksums.txt
a508cc65d9ca5642ef3cbe1e8965e3a90306452d99953ee25b1873f4389f0e7e  mindthegap_v1.14.1_darwin_amd64.tar.gz
bed0dede9a10fddae46e3124d05fa39398a4e38bf64adaad15a51f6798862b74  mindthegap_v1.14.1_darwin_arm64.tar.gz
e4d0fe1bfa4eaef93edfe621d2ab346696be085c9152be430f627c1da03f017b  mindthegap_v1.14.1_linux_amd64.tar.gz
1e4b9386223e64280ac4c2c68b6a337aeb911c7ec5a252fedb76d01972f6c765  mindthegap_v1.14.1_linux_arm64.tar.gz
98e353d7051158262a35ceafd4298283b0aa9e57d68ba3cc3bd98d53eaa06fec  mindthegap_v1.14.1_windows_amd64.zip
75dea1e535966529d35b439d93242d740c3089cc751cc3ba3550df20acd0bc75  mindthegap_v1.14.1_windows_arm64.zip

[suzuki-shunsuke]

The release workflow failed.

https://github.com/mesosphere/mindthegap/actions/runs/9448666105/job/26023167924

      • upload failed                                request-id=2009:1B15D1:105C96:120651:6666F8D1 error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_windows_arm64.zip: 422 Validation Failed [{Resource:ReleaseAsset Field:name Code:already_exists Message:}] name=mindthegap_v1.14.1_windows_arm64.zip release-id=159662533
      • failed to upload artifact, will retry        try=1 artifact=mindthegap_v1.14.1_windows_arm64.zip error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_windows_arm64.zip: 422 Validation Failed [{Resource:ReleaseAsset Field:name Code:already_exists Message:}]
      • uploading to release                         file=dist/checksums.txt name=checksums.txt
      • upload failed                                request-id=200A:166D67:E0DAE:FB764:6666F8D1 error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_darwin_arm64.tar.gz: 404 Not Found [] name=mindthegap_v1.14.1_darwin_arm64.tar.gz release-id=159662533
      • failed to upload artifact, will retry        try=1 artifact=mindthegap_v1.14.1_darwin_arm64.tar.gz error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_darwin_arm64.tar.gz: 404 Not Found []
      • uploading to release                         file=dist/mindthegap_v1.14.1_darwin_arm64.tar.gz name=mindthegap_v1.14.1_darwin_arm64.tar.gz
      • upload failed                                request-id=200B:348F34:E9DA1:10477B:6666F8D2 error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_darwin_arm64.tar.gz: 422 Validation Failed [{Resource:ReleaseAsset Field:name Code:already_exists Message:}] name=mindthegap_v1.14.1_darwin_arm64.tar.gz release-id=159662533
      • failed to upload artifact, will retry        try=2 artifact=mindthegap_v1.14.1_darwin_arm64.tar.gz error=POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_darwin_arm64.tar.gz: 422 Validation Failed [{Resource:ReleaseAsset Field:name Code:already_exists Message:}]
      • took: 3s
  • took: 7s
  ⨯ release failed after 7m51s               error=scm releases: failed to publish artifacts: failed to upload mindthegap_v1.14.1_windows_arm64.zip after 1 tries: POST https://uploads.github.com/repos/mesosphere/mindthegap/releases/159662533/assets?name=mindthegap_v1.14.1_windows_arm64.zip: 422 Validation Failed [{Resource:ReleaseAsset Field:name Code:already_exists Message:}]
task: Failed to run task "build:release": exit status 1
Error: error running script "task" in Devbox: exit status 201

Error: Process completed with exit code 201.

[jimmidyson]

Thank you for the report! This was an error that triggered the release workflow multiple times concurrently. Building tarballs is non-deterministic right now as it embeds creation timestamps so checksums was uploaded from one job and some artifacts from another. Hopefully this is now fixed in v1.14.3 - coming very soon!

[jimmidyson]

Release succeeded (https://github.com/mesosphere/mindthegap/actions/runs/9469885882/job/26089574833) and tested that checksums are correct:

$ gh -R mesosphere/mindthegap release download v1.14.3

$ sha256sum -c checksums.txt
mindthegap_v1.14.3_darwin_amd64.tar.gz: OK
mindthegap_v1.14.3_darwin_arm64.tar.gz: OK
mindthegap_v1.14.3_linux_amd64.tar.gz: OK
mindthegap_v1.14.3_linux_arm64.tar.gz: OK
mindthegap_v1.14.3_windows_amd64.zip: OK
mindthegap_v1.14.3_windows_arm64.zip: OK