Requesting a stable download url
Opened this issue · 0 comments
BYVoid commented
Hi Flatbuffers team,
The download url https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz
does not guarantee a stable checksum. Please create a locally generated tar.gz file and upload it to ensure the archive checksum stability.
Here is the warning from Bazel central registry.
BcrValidationResult.FAILED: flatbuffers@24.3.25 is using an unstable source url: `https://github.com/google/flatbuffers/archive/refs/tags/v24.3.25.tar.gz`.
--
| You should use a release archive URL in the format of `https://github.com/<ORGANIZATION>/<REPO>/releases/download/<version>/<name>.tar.gz` to ensure the archive checksum stability.
| See https://blog.bazel.build/2023/02/15/github-archive-checksum.html for more context.