You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I cloned the repo, and found that running go mod tidy updated the go.sum file; perhaps an oversight on the latest release. I won't know if this fixes the issue I'm seeing on dependabot until it's merged and a new version is tagged.
To Reproduce
Steps to reproduce the behavior:
I updated revive go get -u github.com/mgechev/revive
I ran dependabot on my own repo
Expected behavior
dependabot ought to be able to download this dependency, and the checksum matches.
Logs
N/A
Desktop (please complete the following information):
OS: macOS Catalina
Version of Go: 1.17
Additional context
N/A
The text was updated successfully, but these errors were encountered:
👋 - @mgechev - Did you inadvertently overwrite the tag? Because this dependency is referenced by golangci since version 1.44.0 (published 17 days ago) and looks to be published yesterday.
#24 61.27 verifying github.com/mgechev/revive@v1.1.3: checksum mismatch
#24 61.27 downloaded: h1:ArABBj0sr7jnQnIvBM2NlH8kcv4LaiaAStCAKMSfslk=
#24 61.27 go.sum: h1:6tBZacs2/uv9UOpkBQhCtXh2NGgu2Ry97ZyjcN6uDCM=
#24 61.27
#24 61.27 SECURITY ERROR
#24 61.27 This download does NOT match an earlier download recorded in go.sum.
#24 61.27 The bits may have been replaced on the origin server, or an attacker may
#24 61.27 have intercepted the download attempt.
Describe the bug
My run of dependabot tripped on the version 1.1.3 of this repo:
I cloned the repo, and found that running
go mod tidy
updated thego.sum
file; perhaps an oversight on the latest release. I won't know if this fixes the issue I'm seeing on dependabot until it's merged and a new version is tagged.To Reproduce
Steps to reproduce the behavior:
go get -u github.com/mgechev/revive
Expected behavior
dependabot ought to be able to download this dependency, and the checksum matches.
Logs
N/A
Desktop (please complete the following information):
Additional context
N/A
The text was updated successfully, but these errors were encountered: