Installing avrdude 6.3.0-arduino17 fails with `checksum doesn't match`

[umbynos]

Describe the problem

Trying to compile and upload in the cloud editor for the UNO R3 is not successful:
Start command: fork/exec {runtime.tools.avrdude.path}/bin/avrdude: no such file or directory:

Registrazione.schermo.2024-03-13.alle.09.28.15.mov

This is caused by a failed installation of avrdude version 6.3.0-arduino17.

Downloading the archive using a browser or curl succeeds, and the checksum is the one specified in the package_staging_index.json and the one reported above.
When downloading the archive in the go code, for some reason, the archive is truncated.

arduino-create-agent/v2/pkgs/tools.go

Line 192 in b350f56

res, err := http.Get(url)

The problem seems to related to the way the binary is downloaded using the net/http package.
The expected checksum is: SHA-256:120cc9edaae699e7e9ac50b1b8eb0e7d51fdfa555bac54233c2511e6ee5418c9
The one we got in the go code is: SHA-256:6e9a4c2472ea6aa4d9eea92789f654d8768689d523fcd0255a0e0425a93bde22

To reproduce

To replicate the issue:

curl 'http://127.0.0.1:8991/v2/pkgs/tools/installed' \
                                      -H 'Origin: https://app.arduino.cc' \
                                      --data-raw '{"checksum":"SHA-256:120cc9edaae699e7e9ac50b1b8eb0e7d51fdfa555bac54233c2511e6ee5418c9","name":"avrdude","packager":"arduino","signature":"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","url":"http://downloads.arduino.cc/tools/avrdude-6.3.0-arduino17-x86_64-apple-darwin12.tar.bz2","version":"6.3.0-arduino17"}'

Expected behavior

The installation of avrdude is performed with success, since the checksum is correct.

Arduino Create Agent version

1.3.9

Operating system

N/A

Operating system version

N/A

Browser

N/A

Browser version

N/A

Additional context

No response

Issue checklist

• I searched for previous reports in the issue tracker
• I verified the problem still occurs when using the latest version
• My report contains all necessary details