[Package Issue]: xLightsSequencer.xLights : Installer hash does not match

[ptr727]

Please confirm these before moving forward

• I have searched for my issue and not found a work-in-progress/duplicate/resolved issue.
• I have not been informed if the issue is resolved in a preview version of the winget client.

Category of the issue

Installer hash mismatch.

Brief description of your issue

(1/13) Found xLights [xLightsSequencer.xLights] Version 2025.06
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://github.com/xLightsSequencer/xLights/releases/download/2025.06/xLights64_2025_6.exe
  ██████████████████████████████   110 MB /  110 MB
Installer hash does not match.

Steps to reproduce

winget upgrade --all --accept-package-agreements --include-unknown

Actual behavior

(1/13) Found xLights [xLightsSequencer.xLights] Version 2025.06
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://github.com/xLightsSequencer/xLights/releases/download/2025.06/xLights64_2025_6.exe
  ██████████████████████████████   110 MB /  110 MB
Installer hash does not match.

Expected behavior

Install / upgrade without issue.

From https://github.com/microsoft/winget-pkgs/blob/master/manifests/x/xLightsSequencer/xLights/2025.06/xLightsSequencer.xLights.installer.yaml:

InstallerUrl: https://github.com/xLightsSequencer/xLights/releases/download/2025.06/xLights64_2025_6.exe
InstallerSha256: C0C8BDDA41CCF012E70D542D446EB16058046C5294257B5D60F75DCF4E1D1944

wget https://github.com/xLightsSequencer/xLights/releases/download/2025.06/xLights64_2025_6.exe

Get-FileHash -Path .\xLights64_2025_6.exe -Algorithm SHA256

Algorithm       Hash                                                                   Path
---------       ----                                                                   ----
SHA256          1806758670F8951D50933347F091D8F0B886C57800419B34E5CBE3DFA516B314       C:\Users\piete\xLights64_2025_6.exe

Actual hash: 1806758670F8951D50933347F091D8F0B886C57800419B34E5CBE3DFA516B314

Environment

winget --info
Windows Package Manager v1.11.400
Copyright (c) Microsoft Corporation. All rights reserved.

Windows: Windows.Desktop v10.0.26100.4484
System Architecture: X64
Package: Microsoft.DesktopAppInstaller v1.26.400.0

Winget Directories
-------------------------------------------------------------------------------------------------------------------------------
Logs                               %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputDir
User Settings                      %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\settings.json
Portable Links Directory (User)    %LOCALAPPDATA%\Microsoft\WinGet\Links
Portable Links Directory (Machine) C:\Program Files\WinGet\Links
Portable Package Root (User)       %LOCALAPPDATA%\Microsoft\WinGet\Packages
Portable Package Root              C:\Program Files\WinGet\Packages
Portable Package Root (x86)        C:\Program Files (x86)\WinGet\Packages
Installer Downloads                %USERPROFILE%\Downloads
Configuration Modules              %LOCALAPPDATA%\Microsoft\WinGet\Configuration\Modules

Links
---------------------------------------------------------------------------
Privacy Statement   https://aka.ms/winget-privacy
License Agreement   https://aka.ms/winget-license
Third Party Notices https://aka.ms/winget-3rdPartyNotice
Homepage            https://aka.ms/winget
Windows Store Terms https://www.microsoft.com/en-us/storedocs/terms-of-sale

Admin Setting                             State
--------------------------------------------------
LocalManifestFiles                        Disabled
BypassCertificatePinningForMicrosoftStore Disabled
InstallerHashOverride                     Disabled
LocalArchiveMalwareScanOverride           Disabled
ProxyCommandLineOptions                   Disabled
DefaultProxy                              Disabled

Screenshots and Logs

No response

[similar-issues-ai]

We've found some similar issues:

• [Package Issue]: Nlitesoft.NTLite hash mismatch #108457 , similarity score: 85%
• [Package Issue]: Tonec.InternetDownloadManager [IDM] #171903 , similarity score: 84%
• [Package Issue]: Microsoft.PowerAutomateDesktop #122541 , similarity score: 84%
• [Package Issue]: Bandisoft.Honeyview #135356 , similarity score: 84%
• [Package Issue]: Package.Identifier glaryutilities #150449 , similarity score: 84%
• [Package Issue]: Package.Identifier Microsoft.PurviewInformationProtection #265308 , similarity score: 83%
• [Package Issue]: Adobe.Acrobat.Pro - Installer hash does not match #223484 , similarity score: 82%
• [Package Issue]: Nlitesoft.NTLite installer hash mismatch when installing #100029 , similarity score: 81%

If any of the above are duplicates, please consider closing this issue out and adding additional context in the original issue.

Note: You can give me feedback by 👍 or 👎 this comment.

[Dragon1573]

Tip

❤ GitHub Releases now supports SHA256 digest directly. Users will not have to calculate the hash themselves.

22:39:57 D:\...\winget-pkgs  [master ≡] 0ms pwsh
$ gh api /repos/xLightsSequencer/xLights/releases/tags/2025.06 --jq '.assets' |
> ConvertFrom-Json -AsHashtable |
> ForEach-Object {
>   [pscustomobject]@{
>     Name = $_.name
>     SHA256 = $_.digest.TrimStart("sha256:").ToUpper()
>     Upload_Date = [System.DateTime]::Parse($_.updated_at).ToLocalTime()   
>   }
> } |
> Format-Table

Name                            SHA256                                                           Upload_Date
----                            ------                                                           -----------
xLights-2025.06-x86_64.AppImage F23FF9D9540FFF0FD8FCD0C0B129E1157530A4543962B20DA1C9B31AC9C9E91B 2025/06/11 00:03:23
xLights64_2025_6.exe            1806758670F8951D50933347F091D8F0B886C57800419B34E5CBE3DFA516B314 2025/06/11 00:10:02

Important

According to validation logs, Azure Pipeline finally passed the test at 2025/06/11 00:05:23 +0800, while the repository publisher uploaded a new asset file at 2025/06/11 00:10:02 +0800. This might cause the problem.