Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The checksum for release version 1.2.9 has changed #1332

Open
ltetreault-va opened this issue Apr 10, 2024 · 0 comments
Open

The checksum for release version 1.2.9 has changed #1332

ltetreault-va opened this issue Apr 10, 2024 · 0 comments

Comments

@ltetreault-va
Copy link

ltetreault-va commented Apr 10, 2024

Describe the bug
The checksum for release 1.2.9 has changed since it was initially released. We have a repository that was updated to 1.2.9 on April 2nd, 2024, but now running go mod vendor on that same repo spits out a checksum error as seen in the screenshots below.

Here is a diff between an instance of the package previously downloaded for v1.2.9 vs what is downloaded now for the same version

diff --color -r ./vendor/go.uber.org/cadence/CHANGELOG.md ../<new-go-project>/vendor/go.uber.org/cadence/CHANGELOG.md
8,14d7
< ## [v1.2.9] - 2024-03-01
< ### Added
< - retract directive for v1.2.8
< 
< ### Changed
< - Revert breaking changes from v1.2.8 (#1315)
< 
diff --color -r ./vendor/go.uber.org/cadence/internal/version.go ../<new-go-project>/vendor/go.uber.org/cadence/internal/version.go
46c46
< const LibraryVersion = "1.2.9"
---
> const LibraryVersion = "1.2.8"

Old Repo go.sum:

go.uber.org/cadence v1.2.9 h1:+jo3lVHy9XSGfmbOLVEh6mSmgHnALcBdoSvIQqSdnOc=
go.uber.org/cadence v1.2.9/go.mod h1:EL7wjwJZVbFvNWkp39NQh9jB1ZLWsu9Gy3Z7Jecx2Z8=

New Repo go.sum:

go.uber.org/cadence v1.2.9 h1:oGERGAnF8RwLMzW2POR2iKKbrcsntkkdNQ1Kuh7tD2w=
go.uber.org/cadence v1.2.9/go.mod h1:EL7wjwJZVbFvNWkp39NQh9jB1ZLWsu9Gy3Z7Jecx2Z8=

To Reproduce
Is the issue reproducible?

  • Yes

Steps to reproduce the behavior:

  • Check If you have a previous version of the package in your vendored files with the checksum +jo3lVHy9XSGfmbOLVEh6mSmgHnALcBdoSvIQqSdnOc=
  • Run go mod vendor/tidy and it should fail

Expected behavior
The checksum should not have changed on a released version of the package

Screenshots
image

Additional context
Go version: 1.22.2

@ltetreault-va ltetreault-va changed the title The checksum for version 1.2.9 has changed The checksum for release version 1.2.9 has changed Apr 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant