getmonero.org/downloads/hashes.txt has a line for "monero-source-v0.18.4.2.tar.bz2" file, but it is nowhere to be found, the checksum of the source code tarball on github doesn't match with the provided sha256

where can i find it?

also, is there a way to find hashes of older releases or, better, gpg signature files for the release tarballs themselves, to simplify automated signature verification? i maintain the gentoo package, and it doesn't check the signatures yet

<ofrnxmr:xmr.mx> L29Ah: The source tarball on github is not the one we use

<ofrnxmr:xmr.mx> L29Ah: Hashes of older releases are all in the commit history of monero-site, the hashes.txt file

<ofrnxmr:xmr.mx> And in the gitian.sigs repo

<pixel> .

Revuo Monero Issue 248: September 8 - October 7, 2025. revuo-xmr.com/weekly/issue-248