v1.42.8 tag was deleted and recreated again but the gosum DB was not updated with the new checksum resulting in
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
or serving the old version of v1.42.8. This is a new release with no changes to fix that issue
Full Changelog: v1.42.8...v1.42.9