[libsodium] build failure, wrong hash since url points to dynamic tag about vcpkg

[LilyWangLL]

The related upstream issue: jedisct1/libsodium#1373

[dg0yt]

The cited url https://github.com/jedisct1/libsodium/archive/1.0.19.tar.gz does not point to the actual release, but to a tag that is used like a branch.

Can you please explain this, or point to a document which explains this?
(Why does one need to use tags like a branch?)

[Green-Sky]

Can you please explain this, or point to a document which explains this? (Why does one need to use tags like a branch?)

I just took a look at their repo and compared https://github.com/jedisct1/libsodium/commits/1.0.19/ with https://github.com/jedisct1/libsodium/commits/1.0.19-RELEASE/ .
Both are tags, but only one points to the actual commit form back when it was released.
The non-RELEASE tag points to a commit from just a few days ago.

I still think the release tarball should be used instead https://github.com/jedisct1/libsodium/releases/download/1.0.19-RELEASE/libsodium-1.0.19.tar.gz .

And, while you are at it, update to the fresh 1.0.20 :)

[dg0yt]

It would be good to know if they changed the tag by accident, and to have some official reference to add to a comment.

And vcpkg generally prefers the on-the-fly tarballs from git(hub).