[Bug 286525] science/py-scikit-sparse: bad distinfo and cached version at distcache.freebsd.org is wrong

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286525

            Bug ID: 286525
           Summary: science/py-scikit-sparse: bad distinfo and cached
                    version at distcache.freebsd.org is wrong
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: yuri@freebsd.org
          Reporter: jcfyecrayz@liamekaens.com
             Flags: maintainer-feedback?(yuri@freebsd.org)
          Assignee: yuri@freebsd.org

'make fetch' is failing to get the upstream tarball due to bad distinfo...

=======
% make DISTDIR=/tmp/dist MASTER_SITE_BACKUP= fetch
===>  License BSD2CLAUSE accepted by the user
===>   py311-scikit-sparse-0.4.16 depends on file: /usr/local/sbin/pkg - found
=> scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz doesn't seem to exist in
/tmp/dist/.
=> Attempting to fetch
https://codeload.github.com/scikit-sparse/scikit-sparse/tar.gz/v0.4.16?dummy=/scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz
fetch:
https://codeload.github.com/scikit-sparse/scikit-sparse/tar.gz/v0.4.16?dummy=/scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz:
size unknown
fetch:
https://codeload.github.com/scikit-sparse/scikit-sparse/tar.gz/v0.4.16?dummy=/scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz:
size of remote file is not known
scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz         404 kB 1995 kBps    00s
=> Fetched file size mismatch (expected 414739, actual 414706)
=> Couldn't fetch it - please try to retrieve this
=> port manually into /tmp/dist/ and try again.
*** Error code 1

=======

Furthermore, if you allow the backup at distcache.freebsd.org to be fetched
(don't disable MASTER_SITE_BACKUP as I did above), it is not the correct
tarball for version 0.4.16.  In fact, it is some tarball with files dated Oct
17, 2024 (the 0.4.16 release was tagged Apr 27, 2025).  The only difference
between the 0.4.15 tarball and the strange 0.4.16 tarball at cache.freebsd.org
are the dates on the files, and the files pyproject.toml, setup.py and
__init__.py are a little different (see the diff below [[1]]).  The real 0.4.16
tarball has many more differences (that actually match the committed files in
the upstream git repo).  The dates for files in the 0.4.15 tarball are from Aug
4, 2024.

FYI, the UTC date stamp of the bad cached tarball is:

-rw-r--r--+ 1 0 0 414739 2025-04-23 10:21:22
scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz

I don't know where it came from, but it's strange and certainly not correct.

This is the correct distinfo, I believe:

% cat distinfo.new
TIMESTAMP = 1746190215
SHA256 (scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz) =
be75af5e8a9ff4bb947c2de02936d26b7727b1f92aa74fbd6cdb57414946e82f
SIZE (scikit-sparse-scikit-sparse-v0.4.16_GH0.tar.gz) = 414706

I got that by moving away any existing distribution file (in DISTDIR) and
running 'make makesum'

If you correct this distinfo, please bump PORTREVISION (so packages get
rebuilt).

[[1]]
=======
% diff -ur 0.4.15/scikit-sparse-0.4.15/ 0.4.16-bad/scikit-sparse-0.4.16/
diff -ur 0.4.15/scikit-sparse-0.4.15/pyproject.toml
0.4.16-bad/scikit-sparse-0.4.16/pyproject.toml
--- 0.4.15/scikit-sparse-0.4.15/pyproject.toml  2024-08-04 09:25:13.000000000
-0600
+++ 0.4.16-bad/scikit-sparse-0.4.16/pyproject.toml      2024-10-17
13:49:12.000000000 -0600
@@ -28,8 +28,9 @@
     'numpy>=1.13.3; python_version=="3.6"',
     'numpy>=1.14.5; python_version=="3.7"',
     'numpy>=1.17.3; python_version=="3.8"',
-    'numpy>=1.19.3; python_version=="3.9"',
-    'numpy>=1.23.1; python_version=="3.10"',
-    'numpy>=1.23.5; python_version>="3.11"',
+    'numpy>=2.0; python_version=="3.9"',
+    'numpy>=2.0; python_version=="3.10"',
+    'numpy>=2.0; python_version>="3.11"',
+    'numpy>=2.0; python_version>="3.12"',
 ]
 build-backend = "setuptools.build_meta"
diff -ur 0.4.15/scikit-sparse-0.4.15/setup.py
0.4.16-bad/scikit-sparse-0.4.16/setup.py
--- 0.4.15/scikit-sparse-0.4.15/setup.py        2024-08-04 09:25:13.000000000
-0600
+++ 0.4.16-bad/scikit-sparse-0.4.16/setup.py    2024-10-17 13:49:12.000000000
-0600
@@ -83,7 +83,8 @@
         "": ["test_data/*.mtx.gz"],
     },
     name=DISTNAME,
-    version="0.4.15",  # remember to update __init__.py
+
+    version="0.4.16",  # remember to update __init__.py
     maintainer=MAINTAINER,
     maintainer_email=MAINTAINER_EMAIL,
     description=DESCRIPTION,
diff -ur 0.4.15/scikit-sparse-0.4.15/sksparse/__init__.py
0.4.16-bad/scikit-sparse-0.4.16/sksparse/__init__.py
--- 0.4.15/scikit-sparse-0.4.15/sksparse/__init__.py    2024-08-04
09:25:13.000000000 -0600
+++ 0.4.16-bad/scikit-sparse-0.4.16/sksparse/__init__.py        2024-10-17
13:49:12.000000000 -0600
@@ -1 +1 @@
-__version__ = "0.4.15"
+__version__ = "0.4.16"

=======

-- 
You are receiving this mail because:
You are the assignee for the bug.