Update Wix3 to Wix4 , hash mismatch for a certain package

[Federau]

Hey guys, I have a bundle using custom BA and two packages. one for business , the other for webview2runtime.

<Fragment Id="PackageFragment">
		<PackageGroup Id="InstallerPackages">
			<MsiPackage Id="CargoWiseWebViewSetup" Name="CargoWiseWebViewSetup.msi" SourceFile="..\Bin\CargoWise.Blazor.Client.WebView.Setup\WebViewSetup.msi" DownloadUrl="https://localhost:5001/_sessionbroker/installer/{2}" ForcePerMachine="yes" Compressed="no" Vital="yes" />
			<MsiPackage Id="CargoWiseClientSetup" Name="ClientSetup.msi" SourceFile="..\Bin\CargoWise.Blazor.Client.Setup\CargoWiseClientSetup.msi" DownloadUrl="https://localhost:5001/_sessionbroker/installer/{2}" Compressed="no" ForcePerMachine="yes"  />
		</PackageGroup>
</Fragment>

we used to use wix 3.11.2 to build the bundle and package(we call it 1.0) run bundle 1.0, and then I upgrade both package ,bundle and custom ba to wix4.0.1 and build this (we call it version 2.0).
if 1.0 is not installed on my machine, I can install 2.0 normally. but if I install 1.0 first, and then try to install 2.0 . I get a hash mismatch:

[25D8:6180][2023-09-22T08:56:02]e000: Error 0x80091007: Hash mismatch for path: C:\ProgramData\Package Cache\{6D63B3C9-0112-0000-1722-000000000058}v112.0.1722.58\CargoWiseWebViewSetup.msi, expected: BDF65EBECB2FC99803D807CFB920643FE836D52A5FA0EADE7BAB567006C3AB84FF3DA34E91C78E9D95AAF86102A85D806738C75FE86883243CA21F2609B29403, actual: 4DE1ED474A7B2E3FCEA63A4C94D39C0ABCF7DDBE8A950EFB9FE9EB7E62E6507BA55B627F31D14BA845BF9B77B420F3A39A3FC20126B67EFDF004C0F3E6F468D2
[25D8:6180][2023-09-22T08:56:02]e000: Error 0x80091007: Failed to verify hash of payload: CargoWiseWebViewSetup
[25D8:6180][2023-09-22T08:56:02]e310: Failed to verify payload: CargoWiseWebViewSetup at path: C:\ProgramData\Package Cache\{6D63B3C9-0112-0000-1722-000000000058}v112.0.1722.58\CargoWiseWebViewSetup.msi, error: 0x80091007. Deleting file.

Any one encountered this before?

[Federau]

if I set my bundle and package to a new version and use wix4 to build it (like version 2.1). if 2.0 is installed, and then try to install 2.1. the installation could execute correctly!

[robmen]

WiX v4 uses a newer hash algorithm (SHA512) than WiX v3 (SHA1). This will force a recache, as you've noticed.

[Federau]

https://github.com/orgs/wixtoolset/discussions/6569 I got some message from this discussion, set productcode to * can avoid hash mismatch, but maybe this is not I want, because if the webview2runtime version is the same as old one, I think we had better not to install that again!

[Federau]

Can we solve it in another way?

[Federau]

I think I can create a guid by combining runtime version with wixtool version, In that case , any version change we would do a installation rather than recached it. Anyway Thank you so much!