"As of MongoDB 4.3.4, the tools are no longer released along with the MongoDB Server. Going forward, the tools will be released and versioned independently."

I ran into the validity check error as well and did the following:

1. Checked hash of downloaded deb:

sha256sum mongodb-org-tools_100.10.0_x86_64.deb
> c6fe2ed12637bb6a5b2ff6893a6403578155f78d75c847074baf4130b9b60205  mongodb-org-tools_100.10.0_x86_64.deb

1. Looked up hash virustotal: https://www.virustotal.com/gui/file/c6fe2ed12637bb6a5b2ff6893a6403578155f78d75c847074baf4130b9b60205/details. Note that this was all clear.
2. Removed the downloaded mongodb-org-tools_100.10.0_x86_64.deb file
3. Ran an update again, which succeeded with no errors/warnings.
4. Ran sha256sum on the new deb and checked virustotal for the new hash, which did not previously exist. The scan came back clean, however.

I believe this to be safe and the recommended path to get past this error.

I wasn't able to reproduce the checksum issue you found. Consider removing the deb file "mongodb-org-tools_100.10.0_x86_64.deb" from your local system and running makepkg again so it re-downloads the deb file.

==> Validating source_x86_64 files with sha256sums... mongodb-org-tools_100.10.0_x86_64.deb ... FAILED ==> ERROR: One or more files did not pass the validity check! :: Unable to build mongodb-tools-bin - makepkg exited with code: 1

@chovy try a clean build or manually remove mongodb-org-tools_100.10.0_x86_64.deb and redownload it, the filenames are the same for focal and jammy so it's thinking the file is already there, so checksum fails

==> Making package: mongodb-tools-bin 100.10.0-2 (Mon 26 Aug 2024 04:32:33 AM PDT) ==> Retrieving sources... -> Found mongodb-org-tools_100.10.0_x86_64.deb ==> WARNING: Skipping verification of source file PGP signatures. ==> Validating source_x86_64 files with sha256sums... mongodb-org-tools_100.10.0_x86_64.deb ... FAILED ==> ERROR: One or more files did not pass the validity check! -> error downloading sources: /home/ettinger/.cache/yay/mongodb-tools-bin context: exit status 1

:: (1/1) Parsing SRCINFO: mongodb-tools-bin ==> Making package: mongodb-tools-bin 100.10.0-2 (Mon 26 Aug 2024 04:32:34 AM PDT) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Retrieving sources... -> Found mongodb-org-tools_100.10.0_x86_64.deb ==> Validating source_x86_64 files with sha256sums... mongodb-org-tools_100.10.0_x86_64.deb ... FAILED ==> ERROR: One or more files did not pass the validity check! -> error making: mongodb-tools-bin-exit status 1 -> Failed to install the following packages. Manual intervention is required: mongodb-tools-bin - exit status 1 [ettinger@archlinux]:➜ ~

@ubmarco: please make sure to update your system. openssl-1.1 is a package in [core] repo, and openssl is now in version 3.0.7.

For the update 100.6.1-1 -> 100.6.1-2 I'm getting

-> Could not find all required packages:
   openssl-1.1 (Wanted by: mongodb-tools-bin)

Pacman says this:

pacman -Q openssl
openssl 1.1.1.q-1

I'm running into the same issue that @dalu posted. Will you please look into fixing the checksums?

$ sha256sum mongodb-database-tools_100.4.0_*
4f65de24640ad86e51988616c58e3813e024427c88879218d0a4d245bdad24e5  mongodb-database-tools_100.4.0_amd64.deb
572adc95660bb137ff2a74ee74873e71fd1ea5405415b81b21696c8ed722147f  mongodb-database-tools_100.4.0_arm64.deb

  -> Found mongodb-org-tools_100.4.0_x86_64.deb
==> Validating source_x86_64 files with sha256sums...
    mongodb-org-tools_100.4.0_x86_64.deb ... FAILED
==> ERROR: One or more files did not pass the validity check!
error downloading sources: mongodb-tools-bin

"As of MongoDB 4.3.4, the tools are no longer released along with the MongoDB Server. Going forward, the tools will be released and versioned independently."