Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-77083

github archive checksums no longer match for custom npm dependencies shifter and istanbul

    XMLWordPrintable

Details

    • Bug
    • Resolution: Deferred
    • Minor
    • None
    • 3.11.12, 4.0.6, 4.1
    • Libraries

    Description

      Github have recently changed the way they store zip archives:

      https://github.blog/changelog/2023-01-30-git-archive-checksums-may-change/

       

      Looks like they are reverting it, but it's caused problems with NODE with the following errors:

        npm WARN tarball tarball data for istanbul@https://github.com/andrewnicols/istanbul/archive/v0.4.5_moodle-0.tar.gz (sha512-/cUwJCicWFnJrjYPFy51m0xauDl  
        TUZNztxjYE5oaLuLvCASTv4gFYsjwoEqMQAe0fYRBIRnwcag7KjPXQnpSsw==) seems to be   
        corrupted. Trying again.
        npm ERR! code EINTEGRITY

      Seems to be for both istanbul and shifter builds

       

      Hopefully github are reverting back to the old checksums, but it's probably worth looking at those 2 repos further if they plan to make changes again in future?

      Attachments

        Issue Links

          Activity

            People

              dobedobedoh Andrew Lyons
              danmarsden Dan Marsden
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 hour
                  1h