On Fri, 23 Oct 2026 at 22:13, Ralf Mardorf <[email protected]> wrote:

> On Fri, 2026-10-23 at 12:53 -0700, Anthony Martin wrote:
> > flameshot             14.0.0-
> > 1     https://reproducible.archlinux.org/api/v0/builds/1127055/log
> >
> > ==> Validating source files with sha256sums...
> >     flameshot-14.0.0.tar.gz ... FAILED
> > ==> ERROR: One or more files did not pass the validity check!
>
> at the risk of being accidentally facetious...

the checksums are there to make sure that the upstream files match what the
author of the package has validated, it's their core function.

don't blindly update the checksums, look at the sources they point to and
inspect them first

Reply via email to