Hi Arrow Friends,

Apologies in advance if this is the wrong mailing list or if I’m missing 
something obvious — but I’ve run into something odd with the 
`apache-arrow-adbc-21.tar.gz` release artifact.

I’ve been building ADBC via vcpkg as part of my `adbc_scanner` DuckDB 
extension, using the following source archive:

https://github.com/apache/arrow-adbc/archive/apache-arrow-adbc-21.tar.gz

On *Dec 14, 2025 at 7:46 AM EST*, the SHA512 checksum for that file was:

`74d9dedd15bce71bfbc5bce00ad1aa91be84623010e2a01e6846343a7acc93e36fb263a08cc8437a9467bf63a2c7aca4b14d413325d5afb96b590408d918b27e
`
I know this definitively because that hash is recorded in my vcpkg overlay 
file, and CI completed successfully at the time.

Since then, however, the SHA512 checksum for the same URL now resolves to:

`2c15c67d12b6b5ceafdd284038bff71136bac24b9aff1791ed0657e0f0a56ca713e641f9d1032918179af6c387762491c022f43d32995f94a749a60c7b91f20b
`
This is currently causing reproducible CI failures on the `v1.4` branch of my 
extension, which you can see starting here:

https://github.com/Query-farm/adbc_scanner/actions?page=5

Did I miss an announcement, or was the release artifact rebuilt or replaced 
after the initial publication?

Thanks in advance for any clarification, and sorry again if this is my fault.

Best wishes,

Rusty
--
https://query.farm

Reply via email to