Faraday: checksum does not match for faraday 0.12.0 gem

Created on 1 Apr 2017  ·  9Comments  ·  Source: lostisland/faraday

Getting this for new 0.12.0 version of faraday gem.

Bundler cannot continue installing faraday (0.12.0).
The checksum for the downloaded `faraday-0.12.0.gem` does not 
match the checksum given by the server. This means the contents of 
the downloaded gem is different from what was uploaded to the
server, and could be a potential security issue.
unconfirmed

Most helpful comment

Could you yank the broken gem in the meantime since it can't be installed?

All 9 comments

Hi @jasnow,
I'm really sorry about that, the same happened with faraday_middleware some time ago.
An issue is already open on Rubygems (https://github.com/rubygems/rubygems.org/issues/1551#issuecomment-290918613) to investigate this.
I'll probably re-release it in the next days, you can temporarily solve the issue forcing the version on your Gemfile.

Could you yank the broken gem in the meantime since it can't be installed?

I opened #680 with a change to the Travis CI config to hopefully avoid it, per the comment on the Rubygems issue (indicating it's a race with multiple uploads).

Can the gem be yanked till it gets resolved please.

I encountered this as well.

so am I

+1

Faraday 0.12.0.1 released with fix checksum fix 👍
https://rubygems.org/gems/faraday

Verified fixed. THANKS!

Was this page helpful?
0 / 5 - 0 ratings

Related issues

PandaWhisperer picture PandaWhisperer  ·  6Comments

PavelPenkov picture PavelPenkov  ·  9Comments

iMacTia picture iMacTia  ·  3Comments

luizkowalski picture luizkowalski  ·  3Comments

yarafan picture yarafan  ·  9Comments