dotnet / dotnet/core

Incorrect Hashes on `releases.json` (archives)

Open
#10,285 0 comments 0 reactions 1 assignee Claimed by @rbhanda View on GitHub
area-release-notes area-runtime
Dominant language
PowerShell
Stars
22k
Forks
4.9k
Avg merge
5d 5h
Merged PRs (30d)
29

Description

# Summary
For some of the releases, on `releases.json` we either host the wrong hash or host the wrong build of the product.
While some of these versions are unsupported, I believe we should still remedy them - for example, the .NET SDK still downloads the .NET 7 runtime to run specific support tests, and the latest 7.0.20 runtime has issues.

# Providing Info
I've generated a script and ran it in CI to verify ALL of the released `.zip` and `.tar.gz`s from .NET 5 to .NET 10.
You can see the runs here: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1310281&view=logs&jobId=d36c1be0-8e2c-54ee-62c9-425c0c26e19b&j=d36c1be0-8e2c-54ee-62c9-425c0c26e19b&t=32103a8c-addf-5560-108c-68ea7b6e0a25

In the runs, you can also see the hashes expected and the incorrect hashes.

I am working on checking the .exe and .pkgs.

# Incorrect Files List

## 6.0

```
All 6.0.0-preview.4 zips.
All 6.0.0-rc.1 zips.
All 6.0.2 zips.
```

We could skip fixing the preview/rc releases.

## 7.0

```
https://builds.dotnet.microsoft.com/dotnet/Runtime/7.0.20/dotnet-runtime-7.0.20-osx-arm64.tar.gz
https://builds.dotnet.microsoft.com/dotnet/Runtime/7.0.20/dotnet-runtime-7.0.20-osx-x64.tar.gz
https://builds.dotnet.microsoft.com/dotnet/aspnetcore/Runtime/7.0.20/aspnetcore-runtime-7.0.20-osx-arm64.tar.gz
https://builds.dotnet.microsoft.com/dotnet/aspnetcore/Runtime/7.0.20/aspnetcore-runtime-7.0.20-osx-x64.tar.gz

https://builds.dotnet.microsoft.com/dotnet/aspnetcore/Runtime/7.0.12/aspnetcore-runtime-7.0.12-osx-arm64.tar.gz
https://builds.dotnet.microsoft.com/dotnet/aspnetcore/Runtime/7.0.12/aspnetcore-runtime-7.0.12-osx-x64.tar.gz

```

## 5.0, 8.0, 9.0 and 10.0
Have no issues 👏

cc @richlander @leecow

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.