<div dir="ltr">I was hit by this regeneration again last month so it&#39;s still happening.</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Dec 11, 2015 at 12:55 AM, Burton, Ross <span dir="ltr">&lt;<a href="mailto:ross.burton@intel.com" target="_blank">ross.burton@intel.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><span class=""><br><div class="gmail_quote">On 10 December 2015 at 23:16, Andre McCurdy <span dir="ltr">&lt;<a href="mailto:armccurdy@gmail.com" target="_blank">armccurdy@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>&gt; +SRC_URI = &quot;<a href="https://github.com/openSUSE/libsolv/archive/$%7BPV%7D.zip" rel="noreferrer" target="_blank">https://github.com/openSUSE/libsolv/archive/${PV}.zip</a>&quot;<br>
<br>
</span>GitHub tar file archives sometimes get regenerated and the hashes<br>
change. I&#39;m not sure if the same can happen for zip files, but it&#39;s<br>
probably safer to checkout a git release tag rather than trust the zip<br>
file.</blockquote></div><br></span>For what it&#39;s worth this was true in the past but I&#39;m now reliably informed that the archive tarballs are generated with literally git archive, which goes to great pains to be reproducible.  I would pick the tarball over the zip though.</div><span class="HOEnZb"><font color="#888888"><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></font></span></div>
<br>--<br>
_______________________________________________<br>
Openembedded-core mailing list<br>
<a href="mailto:Openembedded-core@lists.openembedded.org">Openembedded-core@lists.openembedded.org</a><br>
<a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
<br></blockquote></div><br></div>