search

vercel / geist-font

https://vercel.com/font
SIL Open Font License 1.1
2.49k stars 65 forks source link

homebrew SHA256 mismatch #143

Open jonasschultheiss opened 1 month ago

jonasschultheiss commented 1 month ago

Font Name (Geist Sans/Geist Mono):

Description of the Issue: brew is unable to upgrade the fonts as the checksums mismatch. idk how brew works and if you maintain it.

Upgrading font-geist-mono
==> Upgrading 1 outdated package:
font-geist-mono 1.4.0 -> 1.4.01
==> Upgrading font-geist-mono
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/GeistMono-v1.4.01.zip
curl: (56) The requested URL returned error: 404
Error: font-geist-mono: Download failed on Cask 'font-geist-mono' with message: Download failed: https://github.com/vercel/geist-font/releases/download/1.4.01/GeistMono-v1.4.01.zip
==> Purging files for version 1.4.01 of Cask font-geist-mono
Upgrading font-geist-mono has failed!
Upgrading font-geist
==> Upgrading 1 outdated package:
font-geist 1.4.0 -> 1.4.01
==> Upgrading font-geist
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/Geist-v1.4.01.zip
Already downloaded: /Users/jonasschultheiss/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
Error: font-geist: SHA256 mismatch
Expected: b013dce423d16c03238593f6b8e0a281322bafdc2a75b376a91de8721cf18315
  Actual: d12b5e123bdd5a9facbd52ab6a24756587b086d6a76fc629a28456675bfad4e3
    File: /Users/jonasschultheiss/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
To retry an incomplete download, remove the file above.
==> Purging files for version 1.4.01 of Cask font-geist
Upgrading font-geist has failed!

Steps to Reproduce:

  1. idk i use darwin-nix so i run darwin-rebuild switch but i strongly believe that updating via a normal homebrew command should throw this error aswell

Expected Behavior: Matching checksums, enabling me to update

Environment (please complete the following information):

t4sh commented 1 month ago

idk i use darwin-nix so i run darwin-rebuild switch but i strongly believe that updating via a normal homebrew command should throw this error aswell

on MacOS 15.0.1 (without darwin-nix), ran build from source and got the SHA256 different, and the warning. 

brew fetch font-geist --build-from-source 
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/Geist-v1.4.01.zip
==> Downloading from https://objects.githubusercontent.com/github-production-release-asset-2e65be/70
############################################################################################# 100.0%
Downloaded to: /Users/t4shuser/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
SHA256: d12b5e123bdd5a9facbd52ab6a24756587b086d6a76fc629a28456675bfad4e3
Warning: Cask reports different checksum: b013dce423d16c03238593f6b8e0a281322bafdc2a75b376a91de8721cf18315

so can confirm this is occurring without darwin-nix, independently, and I cannot update or reinstall font-geist!

ps: font-geist-mono went ahead smoothly.

AugustMiller commented 1 week ago

This appears to be the result of the release assets/artifacts being manually updated or replaced, after a release. It’s happened at least once before, after the 1.0.0 release.

Original report here; see the timestamps on the 1.4.01 release:

Asset Size Date Actual
Geist-v1.4.01.zip 1.48 MB 3 weeks ago 2024-10-24T01:53:47Z
GeistMono-1.4.01.zip 1.53 MB 3 weeks ago 2024-10-24T01:53:45Z
Source code (zip) 3 weeks ago 2024-10-23T14:33:25Z
Source code (tar.gz) 3 weeks ago 2024-10-23T14:33:25Z

I s'pose this isn't incontrovertible evidence of the source for the hash mismatch—figured I would offer the theory anyway! (I wonder if GitHub exposes prior Release versions via the API?)