<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 10 December 2015 at 23:16, Andre McCurdy <span dir="ltr"><<a href="mailto:armccurdy@gmail.com" target="_blank">armccurdy@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> +SRC_URI = "<a href="https://github.com/openSUSE/libsolv/archive/${PV}.zip" rel="noreferrer" target="_blank">https://github.com/openSUSE/libsolv/archive/${PV}.zip</a>"<br>
<br>
</span>GitHub tar file archives sometimes get regenerated and the hashes<br>
change. I'm not sure if the same can happen for zip files, but it's<br>
probably safer to checkout a git release tag rather than trust the zip<br>
file.</blockquote></div><br>For what it's worth this was true in the past but I'm now reliably informed that the archive tarballs are generated with literally git archive, which goes to great pains to be reproducible. I would pick the tarball over the zip though.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>