The bump casks with schedule cannot retrieve version for draw-things

[liuliu]

Output of brew config

N/A

Output of brew doctor

N/A

Description of issue

In https://github.com/Homebrew/homebrew-cask/actions/runs/12776707116/job/35615929641#step:5:1546
It has happened twice in the row. I updated https://drawthings.ai/releases/ to a new version (same version number, different sha256sum suffix) and it seems the Ruby script cannot recognize the new version. Not sure what's the best fix since I know little about the livecheck mechanism. Thanks!

Relevant casks

https://github.com/Homebrew/homebrew-cask/blob/master/Casks/d/draw-things.rb

[gromgit]

I updated https://drawthings.ai/releases/ to a new version (same version number, different sha256sum suffix) and it seems the Ruby script cannot recognize the new version.

brew refuses to install it precisely because the checksum no longer matches what was observed previously. In this age of software supply chain attacks, distribution media that's quietly changed without bumping the version number is considered suspicious.

Since you're the software author, the logical way forward is to release a new ZIP with a new version...and not do what you just did again.

[liuliu]

Thanks. That's good to know. We consider our distributed package link identified both by version and a short sum. But in this case, will just update the link later.

[gromgit]

We consider our distributed package link identified both by version and a short sum.

Your current practice is akin to git-retagging new content with old tags, even after others have already seen what the old tag refers to, and is correctly called there "the insane thing to do".

The correct way to think about distribution packaging: if either version or checksum changes, the other value must change as well. (The enclosed binaries may retain the same version, but the distribution package must be version-bumped.)

[liuliu]

Thanks for sharing your thoughts. Understood what you are sharing. These concerns are understandable. I just discovered Homebrew as our software distribution channel today so there are some ramp up time for us to understand here.