New review comment by Gottox on void-packages repository

https://github.com/void-linux/void-packages/pull/28510#discussion_r571101731

Comment:
@fosslinux Not true, we check the tar.gz for the right sha256 sum and we hit this issue multiple times where upstream has changed the tars after the release.