Skip to content

Pin to a known version of minecraft data#3

Merged
newexo merged 1 commit into
masterfrom
reuben/pin-mincraft-data-tag
May 13, 2026
Merged

Pin to a known version of minecraft data#3
newexo merged 1 commit into
masterfrom
reuben/pin-mincraft-data-tag

Conversation

@newexo
Copy link
Copy Markdown
Owner

@newexo newexo commented May 13, 2026

Fix: Use stable release tag instead of moving master branch

Problem

The package was downloading master.tar.gz from GitHub with a hardcoded SHA256
hash. Since master is a moving branch, the hash becomes invalid whenever the
remote repository is updated, causing hash validation failures in CI environments.

This is a fundamental design flaw: hardcoding a hash for a moving target defeats
the purpose of hash validation, which is to ensure artifact immutability.

Solution

Switch to using a specific release tag (3.110.1) instead of the master branch:

  • Release tag 3.110.1 is immutable and contains all supported Minecraft versions
    (1.20.6, 1.21.6)
  • Hash is tied to a specific, stable artifact that will never change
  • Hash validation now works reliably in CI and local environments
  • Future releases can be updated by changing the tag and hash

Changes

  • Updated base_url to point to refs/tags/ instead of archive/
  • Changed download from master.tar.gz to 3.110.1.tar.gz
  • Updated hash to
    375a1c0267f395d0a04c01873ca9bae70e23e6bc32b9057d2893ce0a77d86a4a
  • Updated extract paths to reflect the new release name

Testing

Verified that data loads correctly for both supported versions (1.20.6 and
1.21.6).

@newexo newexo merged commit ec97608 into master May 13, 2026
3 checks passed
@newexo newexo deleted the reuben/pin-mincraft-data-tag branch May 13, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant