Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

github.com/bytedance/sonic/loader@v0.1.0: verifying go.mod: checksum mismatch #622

Closed
yangyile1990 opened this issue Apr 18, 2024 · 9 comments

Comments

@yangyile1990
Copy link

go get github.com/bytedance/sonic/loader@v0.1.0
go: github.com/cloudwego/base64x@v0.1.3 requires
        github.com/bytedance/sonic/loader@v0.1.0: verifying go.mod: checksum mismatch
        downloaded: h1:ncP89zfokxS5LZrJxl5z0UJcsk4M4yY2JpfqGeCtNLU=
        sum.golang.org: h1:UmRT+IRTGKz/DAkzcEGzyVqQFJ7H9BqwBO3pm9H/+HY=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
@yangyile1990
Copy link
Author

use this not use others

GOPROXY=https://proxy.golang.org,direct

@AsterDY
Copy link
Collaborator

AsterDY commented Apr 24, 2024

This is because I unexpectedly delete the tag and push it again. You can resolve this through two options:

  • clean you mod cache go clean -modcache and repull all dependency again
  • update to sonic v1.11.6
    Sorry for disturbing. We will continue to work on making sonic more reliable and stable

@zhuwensi
Copy link

This is because I push unexpectedly delete the tag and push it again. You can resolve this through two options:

  • clean you mod cache go clean -modcache and repull all dependency again
  • update to sonic v1.11.6
    Sorry for disturbing. We will continue to work on making sonic more reliable and stable

Hi, with go clean -modcache, the error still exists. maybe other reasons?

@felix021
Copy link
Contributor

felix021 commented Apr 29, 2024

This is because I push unexpectedly delete the tag and push it again. You can resolve this through two options:

  • clean you mod cache go clean -modcache and repull all dependency again
  • update to sonic v1.11.6
    Sorry for disturbing. We will continue to work on making sonic more reliable and stable

Hi, with go clean -modcache, the error still exists. maybe other reasons?

Update to the latest version of sonic should solve this:

go get github.com/bytedance/sonic@latest

@zhuwensi
Copy link

zhuwensi commented Apr 29, 2024

go get github.com/bytedance/sonic@latest

Running go get github.com/bytedance/sonic@latest, it shows the same error:

[root@wonderland-01 one-api]# go get github.com/bytedance/sonic@latest
go: github.com/cloudwego/base64x@v0.1.3 requires
        github.com/bytedance/sonic/loader@v0.1.0: verifying go.mod: checksum mismatch
        downloaded: h1:ncP89zfokxS5LZrJxl5z0UJcsk4M4yY2JpfqGeCtNLU=
        sum.golang.org: h1:UmRT+IRTGKz/DAkzcEGzyVqQFJ7H9BqwBO3pm9H/+HY=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.

I think this is because base64x depends on it. (and many other modules depend on sonic/loader@v0.1.0)

33 require (
 39     github.com/bytedance/sonic v1.11.6 // indirect
 41     github.com/cloudwego/base64x v0.1.3 // indirect  ======> here throws error.

@AsterDY
Copy link
Collaborator

AsterDY commented Apr 29, 2024

try go get -u

@zhuwensi
Copy link

try go get -u

go get -u the same error.

@AsterDY
Copy link
Collaborator

AsterDY commented May 6, 2024

execute go clean -modcache and rm go.sum first, then modify sonic's and base64x's (if depends) versions to the latest in "go.mod", finally go mod tidy

@lovestu
Copy link

lovestu commented May 30, 2024

maybe try go get github.com/bytedance/sonic@v1.11.8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants