[MacPorts] #69395: codeberg projects (star smake cl-nodgui cdrtools): checksum mismatch

[MacPorts]

#69395: codeberg projects (star smake cl-nodgui cdrtools): checksum mismatch
--------------------------------------------+----------------------
  Reporter:  mrkapqa                        |      Owner:  RobK88
      Type:  defect                         |     Status:  assigned
  Priority:  Normal                         |  Milestone:
 Component:  ports                          |    Version:  2.9.1
Resolution:                                 |   Keywords:
      Port:  star smake cl-nodgui cdrtools  |
--------------------------------------------+----------------------

Comment (by ryandesign):

 > I am not sure why soundtouch, mz-cmaketools, newsraft, and snac appear
 to be unaffected.

 > We probably have to contact codeberg to find out what's going on.

 Looks like others already did so. Here is the upstream issue:

 https://codeberg.org/Codeberg/Community/issues/1366

 according to which:

 > * archives downloaded before November 12th 2023 (the date we deployed
 the new Git version which introduced the problem): They have the same
 checksum as today
 > * archives downloaded between November 12th 2023 and Jan 12 2024: The
 checksums might have changed between the initial download and today,
 because of the initial problem and our attempt to fix it; archives from
 older commits downloaded during this time might also have changed
 checksums. But they should be back to the initial checksums now.
 > * archives downloaded after Jan 12 2024: Our patch has made checksums
 deterministic depending on the date of the commit.

 {{{
 % for url in $(port distfiles star soundtouch mz-cmaketools smake cl-
 nodgui newsraft snac cdrtools | grep 'https://distfiles\.macports\.org');
 do echo $url; curl -sI $url | grep -i ^last-modified; done
 https://distfiles.macports.org/star/2023-09-28.tar.gz
 last-modified: Mon, 13 Nov 2023 20:17:55 GMT
 https://distfiles.macports.org/soundtouch/2.3.2.tar.gz
 last-modified: Sun, 21 May 2023 10:54:01 GMT
 https://distfiles.macports.org/mz-
 cmaketools/c3852c301586c53fed76d9201b8cb62377597650.tar.gz
 last-modified: Sat, 23 Dec 2023 16:02:03 GMT
 https://distfiles.macports.org/smake/2023-09-28.tar.gz
 last-modified: Mon, 13 Nov 2023 19:43:34 GMT
 https://distfiles.macports.org/nodgui/96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a.tar.gz
 last-modified: Tue, 19 Dec 2023 19:54:41 GMT
 https://distfiles.macports.org/newsraft/newsraft-0.23.tar.gz
 last-modified: Fri, 02 Feb 2024 15:42:07 GMT
 https://distfiles.macports.org/snac2/2.47.tar.gz
 last-modified: Mon, 12 Feb 2024 23:01:13 GMT
 https://distfiles.macports.org/cdrtools/2023-09-28.tar.gz
 last-modified: Mon, 13 Nov 2023 17:14:46 GMT
 %
 }}}

 The first bullet point explains why soundtouch is unaffected: we fetched
 it before November 12 2023.

 The third bullet point explains why newsraft and snac2 are unaffected: we
 fetched them after January 12 2024.

 The second bullet point must be the explanation for why star, smake, cl-
 nodgui, and cdrtools are affected and mz-cmaketools is not: we fetched
 them between November 12 2023 and January 12 2024.

 So we need to fix star, smake, cl-nodgui, and cdrtools either by updating
 them to new versions or by following the [wiki:PortfileRecipes#stealth-
 updates stealth update recipe].

-- 
Ticket URL: <https://trac.macports.org/ticket/69395#comment:3>
MacPorts <https://www.macports.org/>
Ports system for macOS