[Dev][C++] Don't use GitHub archive files with checksums
- Dominant language
- C++
- Stars
- 17.1k
- Forks
- 4.3k
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 91
Description
### Describe the bug, including details regarding any error messages, version, and platform.
Recently it became apparent that the often used github archive links are not hash stable https://github.blog/changelog/2023-01-30-git-archive-checksums-may-change/
We should, where possible use the artifacts provided in the release package (not the auto generated source code archives though as they are also not hash stable!).
### Component(s)
C++, Developer Tools
Contributor guide
Research direction
Search the repository for GitHub archive links and checksum references, then identify which can use artifacts from release packages instead. Exclude auto-generated source archives, since the issue notes that they are also not hash stable. Done means applicable references use stable release artifacts and no longer rely on unstable GitHub archive checksums.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp, github
- Domain
- build-system, release, tooling
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100