Regression: gbp fails to fetch pristine-tar on 'xdelta3: target window checksum mismatch: XD3_INVALID_INPUT'

The extract-source job in MariaDB 10.5 package CI was passing fine on July 24th, 2023: https://salsa.debian.org/mariadb-team/mariadb-10.5/-/pipelines/555300

With no changes in the source repository itself, the same job started failing on the next run on September 8th, 2023: https://salsa.debian.org/mariadb-team/mariadb-10.5/-/pipelines/576945

$ if find . -maxdepth 3 -wholename "*/debian/source/format" -exec cat {} \; | grep -q '3.0 (gitarchive)' # collapsed multi-line command
gbp:info: All Orig tarballs 'mariadb-10.5_10.5.21.orig.tar.gz' found at '/builds/mariadb-team/mariadb-10.5/debian/output'
gbp:info: Creating /builds/mariadb-team/mariadb-10.5/debian/output/mariadb-10.5_10.5.21.orig.tar.gz
gbp:error: Error creating mariadb-10.5_10.5.21.orig.tar.gz with attached signature file:
 Pristine-tar couldn't checkout "mariadb-10.5_10.5.21.orig.tar.gz": 
 xdelta3: target window checksum mismatch: XD3_INVALID_INPUT

Since nothing changes in the source repository, something must have changed in the CI or the dependencies.

The error is the exact same on reruns - this is not a sporadic issue. I am unable to reproduce it locally with these commands:

cd $(mktemp -d)
git init .
git remote add origin https://salsa.debian.org/mariadb-team/mariadb-10.5.git
gbp pull --ignore-branch --pristine-tar --track-missing --verbose
gbp export-orig --tarball-dir=/tmp

-->
gbp:info: All Orig tarballs 'mariadb-10.5_10.5.21.orig.tar.gz' found at '/tmp'
gbp:info: Creating /tmp/mariadb-10.5_10.5.21.orig.tar.gz

I am filing this bug report to see if other DDs are experiencing similar issues.