google/flatbuffers

Requesting a stable download url

Opened this issue · 0 comments

Hi Flatbuffers team,

The download url https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz does not guarantee a stable checksum. Please create a locally generated tar.gz file and upload it to ensure the archive checksum stability.

Here is the warning from Bazel central registry.

BcrValidationResult.FAILED: flatbuffers@24.3.25 is using an unstable source url: `https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz`.
--
  | You should use a release archive URL in the format of `https://github.com/<ORGANIZATION>/<REPO>/releases/download/<version>/<name>.tar.gz` to ensure the archive checksum stability.
  | See https://blog.bazel.build/2023/02/15/github-archive-checksum.html for more context.