Cask SHA mismatch despite version being up to date

[fds-github]

Output of brew config

HOMEBREW_VERSION: 4.3.8
ORIGIN: https://github.com/Homebrew/brew
HEAD: e5f776b3e23cae8f1b6c3d1194b8329bf701965f
Last commit: 25 hours ago
Core tap JSON: 02 Jul 07:12 UTC
Core cask tap JSON: 02 Jul 07:12 UTC
HOMEBREW_PREFIX: /usr/local
HOMEBREW_REPOSITORY: /usr/local/Homebrew
HOMEBREW_CELLAR: /usr/local/Cellar
HOMEBREW_CASK_OPTS: []
HOMEBREW_DISPLAY: /private/tmp/com.apple.launchd.wInAJm3wkt/org.macosforge.xquartz:0
HOMEBREW_MAKE_JOBS: 8
Homebrew Ruby: 3.3.3 => /usr/local/Homebrew/Library/Homebrew/vendor/portable-ruby/3.3.3/bin/ruby
CPU: octa-core 64-bit westmere
Clang: 15.0.0 build 1500
Git: 2.16.3 => /usr/local/bin/git
Curl: 8.6.0 => /usr/bin/curl
macOS: 14.5-x86_64
CLT: N/A
Xcode: 15.4
Rosetta 2: true

Output of brew doctor

Please note that these warnings are just used to help the Homebrew maintainers
with debugging if you file an issue. If everything you use Homebrew for is
working fine: please don't worry or file an issue; just ignore this. Thanks!

Warning: Some installed kegs have no formulae!
This means they were either deleted or installed manually.
You should find replacements for the following formulae:
  [email protected]
  [email protected]

Warning: Some installed formulae are deprecated or disabled.
You should find replacements for the following formulae:
  [email protected]
  [email protected]

Warning: You have the following deprecated, official taps tapped:
  Homebrew/homebrew-cask-fonts
Untap them with `brew untap`.

Warning: Unbrewed dylibs were found in /usr/local/lib.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae and may need to be deleted.

Unexpected dylibs:
  /usr/local/lib/libmp3lame.0.0.0.dylib
  /usr/local/lib/libmp3lame.0.dylib

Warning: Unbrewed header files were found in /usr/local/include.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae and may need to be deleted.

Unexpected header files:
  /usr/local/include/lame/lame.h

Warning: Unbrewed static libraries were found in /usr/local/lib.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae and may need to be deleted.

Unexpected static libraries:
  /usr/local/lib/libmp3lame.a

Warning: You have unlinked kegs in your Cellar.
Leaving kegs unlinked can lead to build-trouble and cause formulae that depend on
those kegs to fail to run properly once built. Run `brew link` on these:
  [email protected]

Warning: Some installed formulae are not readable:
  [email protected]: undefined method `plist_options' for class Formulary::FormulaNamespace3a716430605e66b4c9d159abcd1af9531a4e5dac99b9a331261a1aea3c72a3d0::PhpAT73

Warning: Your Homebrew's prefix is not /opt/homebrew.

Many of Homebrew's bottles (binary packages) can only be used with the default prefix.
Consider uninstalling Homebrew and reinstalling into the default prefix.
It is expected behaviour that some formulae will fail to build in this unsupported configuration.
It is expected behaviour that Homebrew will be buggy and slow.
Do not create any issues about this on Homebrew's GitHub repositories.
Do not create any issues even if you think this message is unrelated.
Any opened issues will be immediately closed without response.
Do not ask for help from Homebrew or its maintainers on social media.
You may ask for help in Homebrew's discussions but are unlikely to receive a response.
Try to figure out the problem yourself and submit a fix as a pull request.
We will review it but may or may not accept it.


Warning: Homebrew's "sbin" was not found in your PATH but you have installed
formulae that put executables in /usr/local/sbin.
Consider setting your PATH for example like so:
  echo 'export PATH="/usr/local/sbin:$PATH"' >> /Users/Stephen/.bash_profile

Description of issue

Just trying to install composer; don't know taps from casks from formulae. Getting a SHA256 mismatch and asked on composer's github, getting the impression the problem is with an outdated SHA256 in Homebrew. Tried to follow the instructions for checking that the version is up to date, and composer and homebrew seem to agree on 2.7.7. Tried "brew bump --open-pr" and told "no available formula with the name 'composer'". Error is below.

$ brew install composer
==> Fetching composer
Warning: Building composer from source:
  The bottle (and many others) needs to be installed into /opt/homebrew.

==> Downloading https://raw.githubusercontent.com/Homebrew/homebrew-core/189bfaf275e572a59836f5e8030f606501ad851d/Formula/c/composer.rb
Already downloaded: /Users/vojtechdobes/Library/Caches/Homebrew/downloads/c1649faa832601f789c1ffa37de5bf912abc1f14bca9cbbdd9146e8bfba42562--composer.rb
==> Downloading https://getcomposer.org/download/2.7.7/composer.phar
Already downloaded: /Users/vojtechdobes/Library/Caches/Homebrew/downloads/3b16a80d0e8819859d9ffd927146c8c2206f5968c131606db0c9d74fb08af3f9--composer.phar
Error: composer: SHA256 mismatch
Expected: 06e4c4bc6d32b8975174f4f4a0a93476d8907da92a1484c5a8ef138897a760e1
  Actual: aab940cd53d285a54c50465820a2080fcb7182a4ba1e5f795abfb10414a4b4be
    File: /Users/vojtechdobes/Library/Caches/Homebrew/downloads/3b16a80d0e8819859d9ffd927146c8c2206f5968c131606db0c9d74fb08af3f9--composer.phar
To retry an incomplete download, remove the file above.

Relevant casks

composer

[daeho-ro]

I have opened PR to update sha256 checksum.
Homebrew/homebrew-core#176539

[daeho-ro]

I got error

• stable sha256 changed without the url/version also changing; please create an issue upstream to rule out malicious circumstances and to find out why the file changed

I think I cannot change without verification why this changed and is that intended.

[daeho-ro]

The PR is merged and so it will be work.