homebrew SHA256 mismatch

[jonasschultheiss]

Font Name (Geist Sans/Geist Mono):

• Geist Sans
• Geist Mono

Description of the Issue:
brew is unable to upgrade the fonts as the checksums mismatch. idk how brew works and if you maintain it.

Upgrading font-geist-mono
==> Upgrading 1 outdated package:
font-geist-mono 1.4.0 -> 1.4.01
==> Upgrading font-geist-mono
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/GeistMono-v1.4.01.zip
curl: (56) The requested URL returned error: 404
Error: font-geist-mono: Download failed on Cask 'font-geist-mono' with message: Download failed: https://github.com/vercel/geist-font/releases/download/1.4.01/GeistMono-v1.4.01.zip
==> Purging files for version 1.4.01 of Cask font-geist-mono
Upgrading font-geist-mono has failed!
Upgrading font-geist
==> Upgrading 1 outdated package:
font-geist 1.4.0 -> 1.4.01
==> Upgrading font-geist
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/Geist-v1.4.01.zip
Already downloaded: /Users/jonasschultheiss/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
Error: font-geist: SHA256 mismatch
Expected: b013dce423d16c03238593f6b8e0a281322bafdc2a75b376a91de8721cf18315
  Actual: d12b5e123bdd5a9facbd52ab6a24756587b086d6a76fc629a28456675bfad4e3
    File: /Users/jonasschultheiss/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
To retry an incomplete download, remove the file above.
==> Purging files for version 1.4.01 of Cask font-geist
Upgrading font-geist has failed!

Steps to Reproduce:

1. idk i use darwin-nix so i run darwin-rebuild switch but i strongly believe that updating via a normal homebrew command should throw this error aswell

Expected Behavior:
Matching checksums, enabling me to update

Environment (please complete the following information):

• OS: MacOS with nix-darwin
• Software: homebrew
• Version of the Font: 1.4.0 -> 1.4.01

[t4sh]

idk i use darwin-nix so i run darwin-rebuild switch but i strongly believe that updating via a normal homebrew command should throw this error aswell

on MacOS 15.0.1 (without darwin-nix), ran build from source and got the SHA256 different, and the warning.

brew fetch font-geist --build-from-source 
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/Geist-v1.4.01.zip
==> Downloading from https://objects.githubusercontent.com/github-production-release-asset-2e65be/70
############################################################################################# 100.0%
Downloaded to: /Users/t4shuser/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
SHA256: d12b5e123bdd5a9facbd52ab6a24756587b086d6a76fc629a28456675bfad4e3
Warning: Cask reports different checksum: b013dce423d16c03238593f6b8e0a281322bafdc2a75b376a91de8721cf18315

so can confirm this is occurring without darwin-nix, independently, and I cannot update or reinstall font-geist!

ps: font-geist-mono went ahead smoothly.

[AugustMiller]

This appears to be the result of the release assets/artifacts being manually updated or replaced, after a release. It’s happened at least once before, after the 1.0.0 release.

Original report here; see the timestamps on the 1.4.01 release:

Asset	Size	Date	Actual
Geist-v1.4.01.zip	1.48 MB	3 weeks ago	2024-10-24T01:53:47Z
GeistMono-1.4.01.zip	1.53 MB	3 weeks ago	2024-10-24T01:53:45Z
Source code (zip)		3 weeks ago	2024-10-23T14:33:25Z
Source code (tar.gz)		3 weeks ago	2024-10-23T14:33:25Z

I s'pose this isn't incontrovertible evidence of the source for the hash mismatch—figured I would offer the theory anyway! (I wonder if GitHub exposes prior Release versions via the API?)

[t4sh]

update: as of Jan 21, 2025, there is no SHA256 mismatch for Font-geist

• brew install --cask font-geist works good ✅
• build from source does not give any warning

$ brew fetch font-geist --build-from-source  
==> Downloading https://github.com/vercel/geist-font/releases/download/1.4.01/Geist-v1.4.01.zip
Already downloaded: /Users/t4shuser/Library/Caches/Homebrew/downloads/02033928c036692b3640862d8aa941af52a030531883a019d632fe493e32c9c5--Geist-v1.4.01.zip
SHA256: d12b5e123bdd5a9facbd52ab6a24756587b086d6a76fc629a28456675bfad4e3

Thanks for the fix!