Hash of the dependency has changed, but the URL remains the same.

[Junker]

Recently, I tried to build Ghostty, and it informed me that the file at URL "https://deps.files.ghostty.org/wayland-9cb3d7aa9dc995ffafdbdef7ab86a949d0fb0e7d.tar.gz" has been changed and the hash is different. I checked Ghostty's commits and found out that one dependency hash has changed (build.zig.zon.nix:235), but the URL is the same.

How and why did that happen?
From a security perspective, it looks suspicious.

[rhodes-b]

There is the answer from mitchell

[Junker]

Thanks. Could you provide the link to this answer?

[rhodes-b]

If you arent in the discord it is useless to you
https://discord.com/channels/1005603569187160125/1005603569711452192/1345104373910601759