Re: Checksums for some old releases changed

On 10/30/20 3:27 AM, Ivan Pozdeev via pypy-dev wrote:

> When rechecking URLs in installation scripts in Pyenv to fix any 
> invalid ones since the project has moved from BitBucket ( 
> https://github.com/pyenv/pyenv/pull/1692 ) ,
> I noticed that checksums for downloads for some old PyPy releases have 
> changed.
>
> See the altered hashes in this diff to see which exactly: 
> https://github.com/pyenv/pyenv/pull/1692/files .
>
> Could someone explain why? Were the archives repackaged or something?

Thanks for the heads-up.


If I read the diff correctly from that PR, there is are two tarballs 
whose hash changed in the transition from

https://bitbucket.org/pypy/pypy/get

to
https://downloads.python.org/pypy:


pypy3-v5.10.1-osx64-2.tar.bz2
pypy-4.0.0-win32.zip


It is hard to say what might have happened. Perhaps the safe thing to do 
is to remove them.

Matti



For completeness, here is a summary of the other changes in that PR:


These changed in the transition from bitbucket/squeaky/portable-pypy to 
bitbucket-archive.softwareheritage.org


pypy3.5-5.7-beta-linux_x86_64-portable.tar.bz2
pypy3.5-5.8-1-beta-linux_x86_64-portable.tar.bz2
pypy-5.1.1-linux_x86_64-portable.tar.bz2
pypy-5.0.1-linux_x86_64-portable.tar.bz2
pypy-4.0.1-linux_x86_64-portable.tar.bz2
pypy-4.0-linux_x86_64-portable.tar.bz2


these were renamed


release-2.5.0.tar.bz2 -> pypy-2.5.0-src.tar.bz2
release-2.4.0.tar.bz2 -> pypy-2.4.0-src.tar.bz2
release-2.3.1.tar.bz2 -> pypy-2.3.1-src.tar.bz2
pypy-1.5-src.tar.bz2 -> pypy-release-1.5.tar.gz


and these were removed


pypy-1.5-linux.tar.bz2
pypy-1.5-linux64.tar.bz2
pypy-1.5-osx64.tar.bz2
pypy-1.5-win32.zip


There are also changes to stackless python that are not related to PyPy.