assignUser opened a new issue, #33939:
URL: https://github.com/apache/arrow/issues/33939

   ### Describe the bug, including details regarding any error messages, 
version, and platform.
   
   Due to due a change to the compression of 
github.com/repo/owner/archive/tag.tar.gz archives builds with BUNDLED 
dependencies are broken across the board. Even if we update the hashes for HEAD 
they will _**STAY BROKEN**_ for all historic commits and releases. :warning: 
   
   This does not only affect arrow but all package managers relying on these 
links with checksum verification. (conan, vcpkg, homebrew, bazel ...). 
Hopefully they will role this back to allow for backwards compatibility but the 
current communication does not sound like it. But also seems a bit tone deaf to 
the gigantic impact this change has had.
   
   Official announcement (after the fact) 
https://github.blog/changelog/2023-01-30-git-archive-checksums-may-change/
   Additional infos
   https://github.com/bazel-contrib/SIG-rules-authors/issues/11
   https://github.com/orgs/community/discussions/45830
   
   ### Component(s)
   
   Continuous Integration, Developer Tools, Release


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to