[gl2ps] [gmsh] Download failures: Unstable archive hashes from gitlab.onelab.info

[l1308752310]

Host Environment

• Host: x64-windows
• Compiler: MSVC 19.44 (VS2022)
• vcpkg version: Latest (2025-12-05)

To Reproduce

vcpkg install gmsh[occ]
# OR
vcpkg install gl2ps
Failure logs I am encountering persistent unexpected hash errors when downloading sources for both gmsh and gl2ps. Both ports download from gitlab.onelab.info.

The issue appears to be that the download URLs point to dynamic Git archives (/-/archive/). The server seems to regenerate these archives upon request, resulting in different file timestamps or compression metadata, which causes the SHA512 hash to change on every download attempt.
1. Log for gmsh: The "Actual" hash changes every time I try to install.

Plaintext

Downloading [https://gitlab.onelab.info/gmsh/gmsh/-/archive/gmsh_4_14_0/gmsh-gmsh_4_14_0.tar.gz](https://gitlab.onelab.info/gmsh/gmsh/-/archive/gmsh_4_14_0/gmsh-gmsh_4_14_0.tar.gz) -> gmsh-gmsh-gmsh_4_14_0.tar.gz
gmsh-gmsh-gmsh_4_14_0.tar.gz.32340.part: error: download from [https://gitlab.onelab.info/gmsh/gmsh/-/archive/gmsh_4_14_0/gmsh-gmsh_4_14_0.tar.gz](https://gitlab.onelab.info/gmsh/gmsh/-/archive/gmsh_4_14_0/gmsh-gmsh_4_14_0.tar.gz) had an unexpected hash
note: Expected: 45992b474b9e25aa681474740699dc5601abb1cdcbd4e6d3a0eca14a49cac576e085b3d2ffd11d39eab64aa2452c6a411975afabba668305650ec34b4b0040ff
note: Actual  : 291089368d2ebdf72c448d3d1b0a2182051f4d233016907468bb46ce4741989355d279ca0d4bc247186c25a5079809f6309011ed4a9765a5bc17d161d03519a9
2. Log for gl2ps: Same behavior, different hash mismatch.

Plaintext

Downloading [https://gitlab.onelab.info/gl2ps/gl2ps/-/archive/gl2ps_1_4_2/gl2ps-gl2ps_1_4_2.tar.gz](https://gitlab.onelab.info/gl2ps/gl2ps/-/archive/gl2ps_1_4_2/gl2ps-gl2ps_1_4_2.tar.gz) -> gl2ps-gl2ps-gl2ps_1_4_2.tar.gz
gl2ps-gl2ps-gl2ps_1_4_2.tar.gz.33488.part: error: download from [https://gitlab.onelab.info/gl2ps/gl2ps/-/archive/gl2ps_1_4_2/gl2ps-gl2ps_1_4_2.tar.gz](https://gitlab.onelab.info/gl2ps/gl2ps/-/archive/gl2ps_1_4_2/gl2ps-gl2ps_1_4_2.tar.gz) had an unexpected hash
note: Expected: cb4abd79f6790e229a0b05a6d12e4bd4d24885c89c4cb8644e49b0459361565c5c5379b53d85f59eeaba16144d3288dbd06c90f55a739f0928a788224ccb8085
note: Actual  : 130d9b6173c1ae1aec0a2df34a8c7fb83ded968d44c82882846c65ae1296266075a3cf77203ad4bc18dcc68e006d31fdcf781c667015e22cfb8a5aa340cbc7ed
Analysis Since gitlab.onelab.info does not seem to provide stable static release tarballs via these links, the vcpkg_from_gitlab function (which downloads the archive) fails verification repeatedly.

[l1308752310]

Can anyone please confirm whether this is a general issue with the upstream source, or if it might be related to my local network environment?