PRs in distress

What’s the best way to deal with an upstream which reissues tarballs that have different hashes?