diff mbox series

[1/1] Update github hashes

Message ID 20170920112825.3971-1-bernd.kuhls@t-online.de
State Superseded
Headers show
Series [1/1] Update github hashes | expand

Commit Message

Bernd Kuhls Sept. 20, 2017, 11:28 a.m. UTC
It seems github now sometimes provides slightly changed tarballs which
produce a different sha256 hash than before. Fix the hashes of the
affected packages to avoid downloading from sources.buildroot.net.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
 package/freerdp/freerdp.hash                                            | 2 +-
 .../kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash            | 2 +-
 .../kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash    | 2 +-
 package/kodi/kodi.hash                                                  | 2 +-
 package/libasplib/libasplib.hash                                        | 2 +-
 package/mongoose/mongoose.hash                                          | 2 +-
 package/python-mwscrape2slob/python-mwscrape2slob.hash                  | 2 +-
 package/rpi-userland/rpi-userland.hash                                  | 2 +-
 package/sunxi-cedarx/sunxi-cedarx.hash                                  | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)

Comments

Yann E. MORIN Sept. 20, 2017, 5:35 p.m. UTC | #1
Bernd, All,

On 2017-09-20 13:28 +0200, Bernd Kuhls spake thusly:
> It seems github now sometimes provides slightly changed tarballs which
> produce a different sha256 hash than before. Fix the hashes of the
> affected packages to avoid downloading from sources.buildroot.net.

Sigh...

> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>

Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>

Regards,
Yann E. MORIN.

> ---
>  package/freerdp/freerdp.hash                                            | 2 +-
>  .../kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash            | 2 +-
>  .../kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash    | 2 +-
>  package/kodi/kodi.hash                                                  | 2 +-
>  package/libasplib/libasplib.hash                                        | 2 +-
>  package/mongoose/mongoose.hash                                          | 2 +-
>  package/python-mwscrape2slob/python-mwscrape2slob.hash                  | 2 +-
>  package/rpi-userland/rpi-userland.hash                                  | 2 +-
>  package/sunxi-cedarx/sunxi-cedarx.hash                                  | 2 +-
>  9 files changed, 9 insertions(+), 9 deletions(-)
> 
> diff --git a/package/freerdp/freerdp.hash b/package/freerdp/freerdp.hash
> index 2ced373b38..a713f77bb8 100644
> --- a/package/freerdp/freerdp.hash
> +++ b/package/freerdp/freerdp.hash
> @@ -1,2 +1,2 @@
>  # Locally calculated
> -sha256 1db496cca391f76382ef284db2d0306d5c15bf515ee2c964319c22272d969a32  freerdp-17834af7bb378f85a3b3cc4dcadaa5125a337e16.tar.gz
> +sha256 a0e3b203bcc0f38fa8b20318f6e5df3661419b119079bd95d737b66dd1ac4205  freerdp-17834af7bb378f85a3b3cc4dcadaa5125a337e16.tar.gz
> diff --git a/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash b/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
> index f9d400459e..15d3e347f1 100644
> --- a/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
> +++ b/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
> @@ -1,2 +1,2 @@
>  # locally computed
> -sha256	0d45472a967d747bc1948b0332f77c8cd9f6ec1620b0922e82ca5ddd053b40ea  kernel-module-imx-gpu-viv-a05d9b23b9902f6ce87d23772de2fdb2ecfb37a7.tar.gz
> +sha256 f18b826fd25328adf6b4405f48fdf0eaaddc77bb79c0dee76cd8c28aa8ffc078  kernel-module-imx-gpu-viv-a05d9b23b9902f6ce87d23772de2fdb2ecfb37a7.tar.gz
> diff --git a/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash b/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
> index ff9d6d0244..1d0ef080a6 100644
> --- a/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
> +++ b/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
> @@ -1,2 +1,2 @@
>  # Locally computed
> -sha256 a8400c8d8be0fe0ba616ad1d0ef5fd798980a9dd4e38ef88bee9bf74a06975d5  kodi-screensaver-crystalmorph-1dc9bf3f57cc2c5345efec64d9499c3bf8f7bd6e.tar.gz
> +sha256 b99aa6295c8dc6afd0dd22991e611ecc8e9b97aff3a44b905911515609e903ea  kodi-screensaver-crystalmorph-1dc9bf3f57cc2c5345efec64d9499c3bf8f7bd6e.tar.gz
> diff --git a/package/kodi/kodi.hash b/package/kodi/kodi.hash
> index 6c7cf8f615..0dc46133ee 100644
> --- a/package/kodi/kodi.hash
> +++ b/package/kodi/kodi.hash
> @@ -1,5 +1,5 @@
>  # Locally computed
> -sha256 b05e11b2d108222bfc3ff0c9a466d798c0feedf1228166239948e6ed37c3cb4f  kodi-17.4-Krypton.tar.gz
> +sha256 6b0886e7449fc201e0ec0584b37f9f654c429797a41e6d0b6a4b5a7fd5ec34dc  kodi-17.4-Krypton.tar.gz
>  # Locally computed - libdvdcss
>  sha256 b6eb2d929ff56cb051152c32010afc5e7cf5fe8c5ae32dca412a2b46b6b57e34  2f12236.tar.gz
>  # Locally computed - libdvdnav
> diff --git a/package/libasplib/libasplib.hash b/package/libasplib/libasplib.hash
> index 76534e528d..df8161489b 100644
> --- a/package/libasplib/libasplib.hash
> +++ b/package/libasplib/libasplib.hash
> @@ -1,2 +1,2 @@
>  # Locally calculated
> -sha256 68e117348fa17592dde7672477e927119a0e477103ced1d3a57d92e30880a147  libasplib-be7fac89218a84b75f7598e3d76625ece99296f2.tar.gz
> +sha256 c97aa3591a2f4c91a8a3d008e1874cf6a4d3fdcdb71e08cf24b391f328b59254  libasplib-be7fac89218a84b75f7598e3d76625ece99296f2.tar.gz
> diff --git a/package/mongoose/mongoose.hash b/package/mongoose/mongoose.hash
> index d5252eb687..92bbf80bb9 100644
> --- a/package/mongoose/mongoose.hash
> +++ b/package/mongoose/mongoose.hash
> @@ -1,2 +1,2 @@
>  # Locally computed:
> -sha256	ccc971298db70963d3f13766c3246a3c36ae7e388acfab7ba2180149d9c8c64f  mongoose-6.7.tar.gz
> +sha256 7033c4c9ad0aac2aaa53864ff0bee5468a327a78a3218fb753d55a426a791189  mongoose-6.7.tar.gz
> diff --git a/package/python-mwscrape2slob/python-mwscrape2slob.hash b/package/python-mwscrape2slob/python-mwscrape2slob.hash
> index f1f5e4f166..89b32fe679 100644
> --- a/package/python-mwscrape2slob/python-mwscrape2slob.hash
> +++ b/package/python-mwscrape2slob/python-mwscrape2slob.hash
> @@ -1,2 +1,2 @@
>  # Locally computed
> -sha256 367ffc3203f7eb2cc26211f58c0693526652d9a238af48c88f936920e804faf7  python-mwscrape2slob-0f9124ed62009dff6a230947d80340f5a61a6f49.tar.gz
> +sha256 2b111d6faba4e439fdd383da952f3e8fb5760fc6794a9d1ef5dc6f0e080afe7f  python-mwscrape2slob-0f9124ed62009dff6a230947d80340f5a61a6f49.tar.gz
> diff --git a/package/rpi-userland/rpi-userland.hash b/package/rpi-userland/rpi-userland.hash
> index 1728ae8712..e8a78b95fa 100644
> --- a/package/rpi-userland/rpi-userland.hash
> +++ b/package/rpi-userland/rpi-userland.hash
> @@ -1,2 +1,2 @@
>  # Locally computed
> -sha256 476cde13d0d4bbf44ffc4d1d545847464d5c270bb72e4d940e43e5972c4de9da rpi-userland-29835184aa70c13d77a11d721e934a7298bdf46a.tar.gz
> +sha256 46a37eaf0de598ce5804e48a5efc2120e07d753a57ed83463ebfa551562eefe6 rpi-userland-29835184aa70c13d77a11d721e934a7298bdf46a.tar.gz
> diff --git a/package/sunxi-cedarx/sunxi-cedarx.hash b/package/sunxi-cedarx/sunxi-cedarx.hash
> index 048b868982..f40a6449fc 100644
> --- a/package/sunxi-cedarx/sunxi-cedarx.hash
> +++ b/package/sunxi-cedarx/sunxi-cedarx.hash
> @@ -1,2 +1,2 @@
>  # locally computed
> -sha256  ea7426f83325d247ba0d4734eaf1cb53bab178a81f935e2535ddb3069f70ba84  sunxi-cedarx-b8f52d913f73720e50d8f1b2f8610467b575dc45.tar.gz
> +sha256  e674a3b88b12cabc0aaa97c9fdcd898b712daedb549eb49bbf6d1c851c0791f0  sunxi-cedarx-b8f52d913f73720e50d8f1b2f8610467b575dc45.tar.gz
> -- 
> 2.11.0
>
Peter Korsgaard Sept. 20, 2017, 5:52 p.m. UTC | #2
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:

 > It seems github now sometimes provides slightly changed tarballs which
 > produce a different sha256 hash than before. Fix the hashes of the
 > affected packages to avoid downloading from sources.buildroot.net.

 > Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>

:/

I'm not sure updating the hashes is the correct thing to do. Sources.b.o
runs 'make source' from the 2017.02.x and master branches to keep it
uptodate, and E.G. freerdp hasn't been updated since 2017.02, so it will
break hard for 2017.02.x users if we change it.

Falling back to s.b.o is not such a bad thing, so I think we can wait
with fixing up the hashes until the packages get bumped.

In the mean time I will try to figure out who to contact at github to
ask about the change.
Matt Weber Sept. 20, 2017, 6:03 p.m. UTC | #3
All,

On Wed, Sep 20, 2017 at 12:52 PM, Peter Korsgaard <peter@korsgaard.com> wrote:
>>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
>
>  > It seems github now sometimes provides slightly changed tarballs which
>  > produce a different sha256 hash than before. Fix the hashes of the
>  > affected packages to avoid downloading from sources.buildroot.net.
>
>  > Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
>
> :/
>
> I'm not sure updating the hashes is the correct thing to do. Sources.b.o
> runs 'make source' from the 2017.02.x and master branches to keep it
> uptodate, and E.G. freerdp hasn't been updated since 2017.02, so it will
> break hard for 2017.02.x users if we change it.
>
> Falling back to s.b.o is not such a bad thing, so I think we can wait
> with fixing up the hashes until the packages get bumped.
>
> In the mean time I will try to figure out who to contact at github to
> ask about the change.
>

I'd second it would be better to wait.  The iperf hash issue earlier
this summer created a mess until that was bumped.
Bernd Kuhls Sept. 20, 2017, 6:29 p.m. UTC | #4
Am Wed, 20 Sep 2017 13:03:32 -0500 schrieb Matthew Weber:

> All,
> 
> On Wed, Sep 20, 2017 at 12:52 PM, Peter Korsgaard
> <peter@korsgaard.com> wrote:
>>>>>>> "Bernd" == Bernd Kuhls
>>>>>>> <bernd.kuhls@t-online.de> writes:
>>
>>  > It seems github now sometimes provides slightly changed tarballs
>>  > which produce a different sha256 hash than before. Fix the hashes of
>>  > the affected packages to avoid downloading from
>>  > sources.buildroot.net.
>>
>>  > Signed-off-by: Bernd Kuhls
>>  > <bernd.kuhls@t-online.de>
>>
>> :/
>>
>> I'm not sure updating the hashes is the correct thing to do.
>> Sources.b.o runs 'make source' from the 2017.02.x and master branches
>> to keep it uptodate, and E.G. freerdp hasn't been updated since
>> 2017.02, so it will break hard for 2017.02.x users if we change it.
>>
>> Falling back to s.b.o is not such a bad thing, so I think we can wait
>> with fixing up the hashes until the packages get bumped.
>>
>> In the mean time I will try to figure out who to contact at github to
>> ask about the change.
>>
>>
> I'd second it would be better to wait.  The iperf hash issue earlier
> this summer created a mess until that was bumped.

Hi,

I do not see a perfect solution for this problem, the fallback to s.b.o. 
will not circumvent download failures because it does not provide source 
tarballs for all packages:

$ LC_ALL=C wget sources.buildroot.org/kodi-17.4-Krypton.tar.gz
--2017-09-20 20:23:27--  http://sources.buildroot.org/kodi-17.4-
Krypton.tar.gz
Resolving sources.buildroot.org (sources.buildroot.org)... 176.9.16.109
Connecting to sources.buildroot.org (sources.buildroot.org)|
176.9.16.109|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2017-09-20 20:23:27 ERROR 404: Not Found.

Not committing this patch means that downloading the kodi package will 
always fail. Otoh I recognize the mess for the lts versions...

Additionally not all users are using
BR2_BACKUP_SITE="http://sources.buildroot.net"
in their setup, I normally deactivate this option to save bandwidth and 
to be informed when upstream did changes to its website.

Regards, Bernd
Peter Korsgaard Sept. 21, 2017, 7:23 a.m. UTC | #5
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:

Hi,

 > I do not see a perfect solution for this problem, the fallback to s.b.o. 
 > will not circumvent download failures because it does not provide source 
 > tarballs for all packages:

 > $ LC_ALL=C wget sources.buildroot.org/kodi-17.4-Krypton.tar.gz
 > --2017-09-20 20:23:27--  http://sources.buildroot.org/kodi-17.4-
 > Krypton.tar.gz
 > Resolving sources.buildroot.org (sources.buildroot.org)... 176.9.16.109
 > Connecting to sources.buildroot.org (sources.buildroot.org)|
 > 176.9.16.109|:80... connected.
 > HTTP request sent, awaiting response... 404 Not Found
 > 2017-09-20 20:23:27 ERROR 404: Not Found.

 > Not committing this patch means that downloading the kodi package will 
 > always fail. Otoh I recognize the mess for the lts versions...

Odd that hasn't been downloaded yet, but kodi was only very recently
bumped (post-2017.08), so there's no problem fixing the hash there.

Can you send a patch only fixing the kodi hash?


 > Additionally not all users are using
 > BR2_BACKUP_SITE="http://sources.buildroot.net"
 > in their setup, I normally deactivate this option to save bandwidth and 
 > to be informed when upstream did changes to its website.

Save bandwidth? I can understand disabling the option for development
reasons, but this is exactly the reason why we are running the mirror in
the first place and I wouldn't recommend disabling the option for
"normal" users.
Bernd Kuhls Sept. 21, 2017, 9:17 a.m. UTC | #6
Am Thu, 21 Sep 2017 09:23:46 +0200 schrieb Peter Korsgaard:

>>>>>> "Bernd" == Bernd Kuhls
>>>>>> <bernd.kuhls@t-online.de> writes:
> 
>  > Not committing this patch means that downloading the kodi package
>  > will always fail. Otoh I recognize the mess for the lts versions...
> 
> Odd that hasn't been downloaded yet, but kodi was only very recently
> bumped (post-2017.08), so there's no problem fixing the hash there.
> 
> Can you send a patch only fixing the kodi hash?

Hi Peter,

sent http://patchwork.ozlabs.org/patch/816774/ which updates only those 
packages where sources.buildroot.net does not store a copy of the 
previous tarball, not only kodi was affected.

Regarding the build of kodi by autobuilders I think it currently does not 
happen unless at least one of the autobuilders has a full-blown jdk 
installed.

Regards, Bernd
Peter Korsgaard Sept. 21, 2017, 9:32 a.m. UTC | #7
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:

 > Am Thu, 21 Sep 2017 09:23:46 +0200 schrieb Peter Korsgaard:
 >>>>>>> "Bernd" == Bernd Kuhls
 >>>>>>> <bernd.kuhls@t-online.de> writes:
 >> 
 >> > Not committing this patch means that downloading the kodi package
 >> > will always fail. Otoh I recognize the mess for the lts versions...
 >> 
 >> Odd that hasn't been downloaded yet, but kodi was only very recently
 >> bumped (post-2017.08), so there's no problem fixing the hash there.
 >> 
 >> Can you send a patch only fixing the kodi hash?

 > Hi Peter,

 > sent http://patchwork.ozlabs.org/patch/816774/ which updates only those 
 > packages where sources.buildroot.net does not store a copy of the 
 > previous tarball, not only kodi was affected.

Thanks!

 > Regarding the build of kodi by autobuilders I think it currently does not 
 > happen unless at least one of the autobuilders has a full-blown jdk 
 > installed.

Ahh, and that also explains why the tarball wasn't on our mirror - That
machine also doesn't have a jdk.

I'll manually put the tarball there now.
Arnout Vandecappelle Sept. 21, 2017, 8:35 p.m. UTC | #8
On 20-09-17 19:52, Peter Korsgaard wrote:
> I'm not sure updating the hashes is the correct thing to do. Sources.b.o
> runs 'make source' from the 2017.02.x and master branches to keep it
> uptodate, and E.G. freerdp hasn't been updated since 2017.02, so it will
> break hard for 2017.02.x users if we change it.

 So perhaps a workaround would be to change the hashes to none instead? That way
sources.b.o will retain the original tarballs (since they still have the
"correct" hash).

 Not changing the hash gives the problem that the packages are downloaded twice:
once from github, failing hash, and then again from sources.b.o. For 2017.02.x
users that's unavoidable, but for master users we can fix it by changing the
hash to none.

 Of course, the hash file should then have a comment explaining that the hash
should be updated again when the package is bumped.

 Regards,
 Arnout
Peter Korsgaard Sept. 21, 2017, 9:23 p.m. UTC | #9
>>>>> "Arnout" == Arnout Vandecappelle <arnout@mind.be> writes:

 > On 20-09-17 19:52, Peter Korsgaard wrote:
 >> I'm not sure updating the hashes is the correct thing to do. Sources.b.o
 >> runs 'make source' from the 2017.02.x and master branches to keep it
 >> uptodate, and E.G. freerdp hasn't been updated since 2017.02, so it will
 >> break hard for 2017.02.x users if we change it.

 >  So perhaps a workaround would be to change the hashes to none instead? That way
 > sources.b.o will retain the original tarballs (since they still have the
 > "correct" hash).

 >  Not changing the hash gives the problem that the packages are downloaded twice:
 > once from github, failing hash, and then again from sources.b.o. For 2017.02.x
 > users that's unavoidable, but for master users we can fix it by changing the
 > hash to none.

 >  Of course, the hash file should then have a comment explaining that the hash
 > should be updated again when the package is bumped.

Yes, that or simply bumping the version on master (or wait for feedback
from github).
diff mbox series

Patch

diff --git a/package/freerdp/freerdp.hash b/package/freerdp/freerdp.hash
index 2ced373b38..a713f77bb8 100644
--- a/package/freerdp/freerdp.hash
+++ b/package/freerdp/freerdp.hash
@@ -1,2 +1,2 @@ 
 # Locally calculated
-sha256 1db496cca391f76382ef284db2d0306d5c15bf515ee2c964319c22272d969a32  freerdp-17834af7bb378f85a3b3cc4dcadaa5125a337e16.tar.gz
+sha256 a0e3b203bcc0f38fa8b20318f6e5df3661419b119079bd95d737b66dd1ac4205  freerdp-17834af7bb378f85a3b3cc4dcadaa5125a337e16.tar.gz
diff --git a/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash b/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
index f9d400459e..15d3e347f1 100644
--- a/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
+++ b/package/freescale-imx/kernel-module-imx-gpu-viv/kernel-module-imx-gpu-viv.hash
@@ -1,2 +1,2 @@ 
 # locally computed
-sha256	0d45472a967d747bc1948b0332f77c8cd9f6ec1620b0922e82ca5ddd053b40ea  kernel-module-imx-gpu-viv-a05d9b23b9902f6ce87d23772de2fdb2ecfb37a7.tar.gz
+sha256 f18b826fd25328adf6b4405f48fdf0eaaddc77bb79c0dee76cd8c28aa8ffc078  kernel-module-imx-gpu-viv-a05d9b23b9902f6ce87d23772de2fdb2ecfb37a7.tar.gz
diff --git a/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash b/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
index ff9d6d0244..1d0ef080a6 100644
--- a/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
+++ b/package/kodi-screensaver-crystalmorph/kodi-screensaver-crystalmorph.hash
@@ -1,2 +1,2 @@ 
 # Locally computed
-sha256 a8400c8d8be0fe0ba616ad1d0ef5fd798980a9dd4e38ef88bee9bf74a06975d5  kodi-screensaver-crystalmorph-1dc9bf3f57cc2c5345efec64d9499c3bf8f7bd6e.tar.gz
+sha256 b99aa6295c8dc6afd0dd22991e611ecc8e9b97aff3a44b905911515609e903ea  kodi-screensaver-crystalmorph-1dc9bf3f57cc2c5345efec64d9499c3bf8f7bd6e.tar.gz
diff --git a/package/kodi/kodi.hash b/package/kodi/kodi.hash
index 6c7cf8f615..0dc46133ee 100644
--- a/package/kodi/kodi.hash
+++ b/package/kodi/kodi.hash
@@ -1,5 +1,5 @@ 
 # Locally computed
-sha256 b05e11b2d108222bfc3ff0c9a466d798c0feedf1228166239948e6ed37c3cb4f  kodi-17.4-Krypton.tar.gz
+sha256 6b0886e7449fc201e0ec0584b37f9f654c429797a41e6d0b6a4b5a7fd5ec34dc  kodi-17.4-Krypton.tar.gz
 # Locally computed - libdvdcss
 sha256 b6eb2d929ff56cb051152c32010afc5e7cf5fe8c5ae32dca412a2b46b6b57e34  2f12236.tar.gz
 # Locally computed - libdvdnav
diff --git a/package/libasplib/libasplib.hash b/package/libasplib/libasplib.hash
index 76534e528d..df8161489b 100644
--- a/package/libasplib/libasplib.hash
+++ b/package/libasplib/libasplib.hash
@@ -1,2 +1,2 @@ 
 # Locally calculated
-sha256 68e117348fa17592dde7672477e927119a0e477103ced1d3a57d92e30880a147  libasplib-be7fac89218a84b75f7598e3d76625ece99296f2.tar.gz
+sha256 c97aa3591a2f4c91a8a3d008e1874cf6a4d3fdcdb71e08cf24b391f328b59254  libasplib-be7fac89218a84b75f7598e3d76625ece99296f2.tar.gz
diff --git a/package/mongoose/mongoose.hash b/package/mongoose/mongoose.hash
index d5252eb687..92bbf80bb9 100644
--- a/package/mongoose/mongoose.hash
+++ b/package/mongoose/mongoose.hash
@@ -1,2 +1,2 @@ 
 # Locally computed:
-sha256	ccc971298db70963d3f13766c3246a3c36ae7e388acfab7ba2180149d9c8c64f  mongoose-6.7.tar.gz
+sha256 7033c4c9ad0aac2aaa53864ff0bee5468a327a78a3218fb753d55a426a791189  mongoose-6.7.tar.gz
diff --git a/package/python-mwscrape2slob/python-mwscrape2slob.hash b/package/python-mwscrape2slob/python-mwscrape2slob.hash
index f1f5e4f166..89b32fe679 100644
--- a/package/python-mwscrape2slob/python-mwscrape2slob.hash
+++ b/package/python-mwscrape2slob/python-mwscrape2slob.hash
@@ -1,2 +1,2 @@ 
 # Locally computed
-sha256 367ffc3203f7eb2cc26211f58c0693526652d9a238af48c88f936920e804faf7  python-mwscrape2slob-0f9124ed62009dff6a230947d80340f5a61a6f49.tar.gz
+sha256 2b111d6faba4e439fdd383da952f3e8fb5760fc6794a9d1ef5dc6f0e080afe7f  python-mwscrape2slob-0f9124ed62009dff6a230947d80340f5a61a6f49.tar.gz
diff --git a/package/rpi-userland/rpi-userland.hash b/package/rpi-userland/rpi-userland.hash
index 1728ae8712..e8a78b95fa 100644
--- a/package/rpi-userland/rpi-userland.hash
+++ b/package/rpi-userland/rpi-userland.hash
@@ -1,2 +1,2 @@ 
 # Locally computed
-sha256 476cde13d0d4bbf44ffc4d1d545847464d5c270bb72e4d940e43e5972c4de9da rpi-userland-29835184aa70c13d77a11d721e934a7298bdf46a.tar.gz
+sha256 46a37eaf0de598ce5804e48a5efc2120e07d753a57ed83463ebfa551562eefe6 rpi-userland-29835184aa70c13d77a11d721e934a7298bdf46a.tar.gz
diff --git a/package/sunxi-cedarx/sunxi-cedarx.hash b/package/sunxi-cedarx/sunxi-cedarx.hash
index 048b868982..f40a6449fc 100644
--- a/package/sunxi-cedarx/sunxi-cedarx.hash
+++ b/package/sunxi-cedarx/sunxi-cedarx.hash
@@ -1,2 +1,2 @@ 
 # locally computed
-sha256  ea7426f83325d247ba0d4734eaf1cb53bab178a81f935e2535ddb3069f70ba84  sunxi-cedarx-b8f52d913f73720e50d8f1b2f8610467b575dc45.tar.gz
+sha256  e674a3b88b12cabc0aaa97c9fdcd898b712daedb549eb49bbf6d1c851c0791f0  sunxi-cedarx-b8f52d913f73720e50d8f1b2f8610467b575dc45.tar.gz