RPMs changing in the yum repository

I'm not sure where to send this message.

We synchronize a copy of the pgdgXX and the pgdg-common repositories
using the reposync tool.

Occasionally this tools reports errors and will not download some rpms.
An example of the errors are

pgbouncer-debuginfo-1.20.1-42P FAILED
pgbouncer-1.20.1-42PGDG.rhel7. FAILED
pgbouncer-debuginfo-1.20.1-42PGDG.rhel7.x86_64: [Errno 256] No more
mirrors to try.
pgbouncer-1.20.1-42PGDG.rhel7.x86_64: [Errno 256] No more mirrors to try.

It seems obvious that this is some kind of network error or some general
download issue that could be retried at a later time, however, the root
cause of this is that these RPMs had previously been downloaded but the
files were changed in the source repository.

If I move my existing rpms out of the way, the reposync tool happily
downloads the rpms again with no error.

After I have downloaded the files again, I can confirm that they are
different than the previously downloaded copy.

I can also confirm that the rpms I had were not corrupted. They matched
the copy in our backup system. They were dated Aug 9, 2023 and were
backed up on 2023-08-29 (we synchronize the repository on the 28 of each
month). The rpms downloaded today are dated Oct 17, 2023 which also
matches the date on the latest release pgbouncer-debuginfo-1.21.0-42PGDG
and pgbouncer-1.21.0-42PGDG.

It seems like files in the repository got deleted and were rebuilt with
the same version/release identifiers.

Looking at the rpms themselves, the previously downloaded rpm is

rpm  -qip pgbouncer-1.20.1-42PGDG.rhel7.x86_64.rpm

Name        : pgbouncer
Version     : 1.20.1
Release     : 42PGDG.rhel7
Architecture: x86_64
Install Date: (not installed)
Group       : Unspecified
Size        : 542313
License     : MIT and BSD
Signature   : DSA/SHA1, Wed 09 Aug 2023 04:41:03 AM PDT, Key ID
1f16d2e1442df0f8
Source RPM  : pgbouncer-1.20.1-42PGDG.rhel7.src.rpm
Build Date  : Wed 09 Aug 2023 04:41:02 AM PDT
Build Host  : koji-centos7-x86-64-pgbuild
Relocations : (not relocatable)
Vendor      : PostgreSQL Global Development Group
URL         : https://www.pgbouncer.org/
Summary     : Lightweight connection pooler for PostgreSQL

and the latest download is

rpm  -qip pgbouncer-1.20.1-42PGDG.rhel7.x86_64.rpm

Name        : pgbouncer
Version     : 1.20.1
Release     : 42PGDG.rhel7
Architecture: x86_64
Install Date: (not installed)
Group       : Unspecified
Size        : 542313
License     : MIT and BSD
Signature   : (none)
Source RPM  : pgbouncer-1.20.1-42PGDG.rhel7.src.rpm
Build Date  : Tue 17 Oct 2023 02:43:33 AM PDT
Build Host  : koji-centos7-x86-64-pgbuild
Relocations : (not relocatable)
Vendor      : PostgreSQL Global Development Group
URL         : https://www.pgbouncer.org/
Summary     : Lightweight connection pooler for PostgreSQL

The "Build Date" is now different and it appears that the Signature has
been removed.

This all seems to be a very uncommon workflow and is causing failures in
the ability to synchronize the repository.

Evan.