I'm sorry for the wrong combination of URL and hash.
These release tarballs are much smaller; I don't know the difference,
but they still seem to work (openscad, rpacad).
Also comment on modules that aren't built.
It was broken by cmake updates (between 3.2.2 and 3.3.1).
I chose the github tarballs because they have a predictable URL,
although they're much larger due to not supporting xz.
/cc maintainer @7c6f434c.
The previous version bump didn't actually do anything; it changed the
version/url but didn't change the hash. For some reason the (new) URL
returned the same old package with the same old hash (or so it seems).
This time the package is really updated, as can be seen from the version
number in $cgal/include/CGAL/version.h.
This change unbreaks openscad.