Cached downloads of ZIP files are making it impossible to update plugins

[Otto42]

If you download a ZIP file created since the new plugin directory went into effect, you get different results if you're logged in to WordPress.org or not.

~$ curl --head https://downloads.wordpress.org/plugin/fv-wordpress-flowplayer.zip
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Mar 2017 14:55:20 GMT
Content-Type: application/octet-stream
Content-Length: 2019961
Connection: keep-alive
Content-Disposition: attachment; filename=fv-wordpress-flowplayer.zip
Last-Modified: Wed, 15 Mar 2017 15:58:46 GMT
Cache-Control: max-age=604800
X-Frame-Options: SAMEORIGIN
X-nc: HIT lax 202
Accept-Ranges: bytes

This serves up the wrong file. Note the HIT to the cache, as well as the last-modified date being March 15. The ZIP downloaded here is an older version, 6.0.5.21 instead of an updated version made on the 29th. Downloading the ZIP through a browser, logged into the site, gives you the correct version.

This may also be interfering with download stats if the request is not passing through to the site.

Because this only happens to "anonymous" hits, WordPress sites likely cannot receive plugin updates at this time. They get the old ZIP files and thus don't get the new updates. Updates never work, they always show as being available for that plugin.

[Otto42]

This appears to be an internal configuration issue, systems is looking into it.

[Otto42]

This should be fixed now, but report any continuing issues to this ticket.

[FolioVision]

Thanks for the quick fix, Otto. This is generating lots of complaints. It's a pity the Developer tab has been suppressed along with easy historical versions. Feels like a real step backwards to me.

New plugin directory = WordPress the web development system for Android mobile app fans.

Alec

[Otto42]

The info from the Developer area is at the bottom of the page. Click Read More under "Contributors & Developers" section.

And in this case, getting old versions of a plugin was the problem, not a solution. If you want to see links to old versions come back, follow #2365 instead.