[Release][CI][Dev] Change to github.com/repo/owner/archive/tag.tar.gz compression breaks hash compatibility

[assignUser]

Describe the bug, including details regarding any error messages, version, and platform.

Due to due a change to the compression of github.com/repo/owner/archive/tag.tar.gz archives builds with BUNDLED dependencies are broken across the board. Even if we update the hashes for HEAD they will STAY BROKEN for all historic commits and releases. ⚠️

This does not only affect arrow but all package managers relying on these links with checksum verification. (conan, vcpkg, homebrew, bazel ...). Hopefully they will role this back to allow for backwards compatibility but the current communication does not sound like it. But also seems a bit tone deaf to the gigantic impact this change has had.

Official announcement (after the fact) https://github.blog/changelog/2023-01-30-git-archive-checksums-may-change/
Additional infos
bazel-contrib/SIG-rules-authors#11
https://github.com/orgs/community/discussions/45830

Component(s)

Continuous Integration, Developer Tools, Release

[assignUser]

Looks like they are rolling the change back bazel-contrib/SIG-rules-authors#11 (comment)

[assignUser]

It seems that the hashes are back to normal. Will keep an eye on future changes.