Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-77083

github archive checksums no longer match for custom npm dependencies shifter and istanbul

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Deferred
    • Icon: Minor Minor
    • None
    • 3.11.12, 4.0.6, 4.1
    • Libraries

      Github have recently changed the way they store zip archives:

      https://github.blog/changelog/2023-01-30-git-archive-checksums-may-change/

       

      Looks like they are reverting it, but it's caused problems with NODE with the following errors:

        npm WARN tarball tarball data for istanbul@https://github.com/andrewnicols/istanbul/archive/v0.4.5_moodle-0.tar.gz (sha512-/cUwJCicWFnJrjYPFy51m0xauDl  
        TUZNztxjYE5oaLuLvCASTv4gFYsjwoEqMQAe0fYRBIRnwcag7KjPXQnpSsw==) seems to be   
        corrupted. Trying again.
        npm ERR! code EINTEGRITY

      Seems to be for both istanbul and shifter builds

       

      Hopefully github are reverting back to the old checksums, but it's probably worth looking at those 2 repos further if they plan to make changes again in future?

            dobedobedoh Andrew Lyons
            danmarsden Dan Marsden
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 0 minutes
                0m
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour
                1h

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.