Also, the TeXShop upstream developer just now agreed to start using
suffixes rather than stealth updates.  So disregard my suggestion to write
to them.


On Fri, Sep 16, 2022 at 9:07 AM Dave Allured - NOAA Affiliate <
[email protected]> wrote:

> The upstream developer said they intend to release TeXShop 5.03 later
> today.  So port maintainers might as well wait for that, before portfile
> repair.
>
>
> On Fri, Sep 16, 2022 at 7:30 AM Dave Allured - NOAA Affiliate <
> [email protected]> wrote:
>
>> Stealth upgrade detected.  This means the TeXShop developers changed
>> their published source code file without changing the file name.  Version
>> 5.02 was published on September 2.  Checksums in the Macports portfile were
>> last fixed on September 5.  Then the upstream developers changed the source
>> code file on September 9.  Please read more about this in the Macports FAQ,
>> "stealth upgrade".
>>
>> Macports tracks published source code files and uses checksums as a
>> security measure to avoid tampering.  It would be constructive if you would
>> contact the TeXShop developers and ask them to change the file name every
>> time they make any change to a published source code file.  They could bump
>> the version number, or add a suffix, or something.
>>
>> In the future, you can detect a stealth upgrade yourself, by downloading
>> the source code file directly from the source website, and looking for
>> signs of changes after the portfile was last updated.  "There is more than
>> one way to do this."  When you find a stealth update, please notify the
>> port maintainers by filing a Trac ticket.
>>
>> It looks like the port maintainers are responsive and will fix this
>> portfile soon.  If you like, you can try to fix your own local copy of the
>> portfile, so that you can complete your TeXShop installation.
>>
>>
>> On Fri, Sep 16, 2022 at 5:08 AM Gregory Dodwell <[email protected]>
>> wrote:
>>
>>> Macports base version 2.7.2
>>> Mac OS 12.6
>>> XCode 14 with Command-line tools installed.
>>> M1 Macbook Pro
>>>
>>> After performing my regular sudo port selfupdate; sudo port upgrade
>>> outdated maintenance routine I get TeXShop checksum errors.
>>>
>>> Cleaning and reinstalling TeXShop doesn't help.
>>>
>>> TeXShop is crucial for my role as a voluntary secretary for my local
>>> primary school P&C (I set the agendas in LaTeX, using texmaker).
>>>
>>> Here's what the log says:
>>>
>>> " ...
>>> version:1
>>> :debug:main Starting logging for TeXShop @5.02_0
>>> :debug:sysinfo macOS 12.6 (darwin/21.6.0) arch arm
>>> :debug:sysinfo MacPorts 2.7.2
>>> :debug:sysinfo Xcode 14.0
>>> :debug:sysinfo SDK 12
>>> :debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 12.0
>>> :debug:main Found Dependency: path: /usr/bin filename: unzip regex:
>>> ^unzip$
>>> :msg:main --->  Computing dependencies for TeXShop:info:main
>>> .:debug:main TeXShop has no conflicts
>>> :debug:main Found Dependency: path: /usr/bin filename: unzip regex:
>>> ^unzip$
>>> :debug:main Searching for dependency: unzip
>>> :debug:main Didn't find receipt, going to depspec regex for: unzip
>>> :debug:main Found Dependency: path: /usr/bin filename: unzip regex:
>>> ^unzip$
>>> :debug:main Executing org.macports.main (TeXShop)
>>> :debug:main dropping privileges: euid changed to 503, egid changed to
>>> 502.
>>> :debug:archivefetch archivefetch phase started at Fri Sep 16 20:41:05
>>> AEST 2022
>>> :msg:archivefetch --->  Fetching archive for TeXShop
>>> :debug:archivefetch Executing org.macports.archivefetch (TeXShop)
>>> :debug:archivefetch euid/egid changed to: 0/0
>>> :debug:archivefetch chowned /opt/local/var/macports/incoming to macports
>>> :debug:archivefetch euid/egid changed to: 503/502
>>> :info:archivefetch --->  TeXShop-5.02_0.darwin_21.arm64.tbz2 doesn't
>>> seem to exist in /opt/local/var/macports/incoming/verified
>>> :msg:archivefetch --->  Attempting to fetch
>>> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
>>> https://packages.macports.org/TeXShop
>>> :debug:archivefetch Fetching archive failed: The requested URL returned
>>> error: 404
>>> :msg:archivefetch --->  Attempting to fetch
>>> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
>>> https://ywg.ca.packages.macports.org/mirror/macports/packages/TeXShop
>>> :debug:archivefetch Fetching archive failed: The requested URL returned
>>> error: 404
>>> :msg:archivefetch --->  Attempting to fetch
>>> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
>>> https://kmq.jp.packages.macports.org/TeXShop
>>> :debug:archivefetch Fetching archive failed: The requested URL returned
>>> error: 404
>>> :debug:archivefetch Privilege de-escalation not attempted as not running
>>> as root.
>>> :debug:fetch fetch phase started at Fri Sep 16 20:41:08 AEST 2022
>>> :notice:fetch --->  Fetching distfiles for TeXShop
>>> :debug:fetch Executing org.macports.fetch (TeXShop)
>>> :debug:fetch Privilege de-escalation not attempted as not running as
>>> root.
>>> :debug:checksum checksum phase started at Fri Sep 16 20:41:08 AEST 2022
>>> :notice:checksum --->  Verifying checksums for TeXShop
>>> :debug:checksum Executing org.macports.checksum (TeXShop)
>>> :info:checksum --->  Checksumming texshopsource502.zip
>>> :debug:checksum Calculated (rmd160) is
>>> ae8bccdf9ad901070fec3d4f25b426b2415f1279
>>> :error:checksum Checksum (rmd160) mismatch for texshopsource502.zip
>>> :info:checksum Portfile checksum: texshopsource502.zip rmd160
>>> a5d51d8d3f015b8dc588f903e2c7b5eb323384df
>>> :info:checksum Distfile checksum: texshopsource502.zip rmd160
>>> ae8bccdf9ad901070fec3d4f25b426b2415f1279
>>> :debug:checksum Calculated (sha256) is
>>> c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251
>>> :error:checksum Checksum (sha256) mismatch for texshopsource502.zip
>>> :info:checksum Portfile checksum: texshopsource502.zip sha256
>>> 96c7af2c099b22d47b544eaafda642439f774cdd5859f11d5c68cce95f02b374
>>> :info:checksum Distfile checksum: texshopsource502.zip sha256
>>> c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251
>>> :debug:checksum Calculated (size) is 171806461
>>> :error:checksum Checksum (size) mismatch for texshopsource502.zip
>>> :info:checksum Portfile checksum: texshopsource502.zip size 171794435
>>> :info:checksum Distfile checksum: texshopsource502.zip size 171806461
>>> :info:checksum The correct checksum line may be:
>>> :info:checksum checksums           rmd160
>>>  ae8bccdf9ad901070fec3d4f25b426b2415f1279 \
>>> :info:checksum                     sha256
>>>  c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251 \
>>> :info:checksum                     size    171806461
>>> :error:checksum Failed to checksum TeXShop: Unable to verify file
>>> checksums
>>> :debug:checksum Error code: NONE
>>> :debug:checksum Backtrace: Unable to verify file checksums
>>> :debug:checksum     while executing
>>> :debug:checksum "$procedure $targetname"
>>> :error:checksum See
>>> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_aqua_TeXShop/TeXShop/main.log
>>> for details.
>>> ..."
>>>
>>

Reply via email to