cespare/xxhash

checksum mismatch

zneroladivad opened this issue · 2 comments

zneroladivad commented 
github.com/prometheus/client_golang/prometheus imports

    github.com/cespare/xxhash/v2: github.com/cespare/xxhash/v2@v2.1.2: verifying module: checksum mismatch

    downloaded: h1:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=

    sum.golang.org: h1:YRXhKfTDauu4ajMg1TPgFO5jnlC2HCbmLXMcTG5cbYE=
zneroladivad commented

golang version 1.17

cespare commented

I don't know where 47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= comes from. The sum.golang.org checksum is correct:

$ curl https://sum.golang.org/lookup/github.com/cespare/xxhash/v2@v2.1.2
6653065
github.com/cespare/xxhash/v2 v2.1.2 h1:YRXhKfTDauu4ajMg1TPgFO5jnlC2HCbmLXMcTG5cbYE=
github.com/cespare/xxhash/v2 v2.1.2/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=

go.sum database tree
7348388
PYobiEm2lfdrroPaTp5Ez36CExv3zmE6dbfl0SBYDY0=

— sum.golang.org Az3grtQGNWkGl/UiTGFK4t1YrwcWwvjcOU/awo35z7mUB7e7Iy/w8sTE5SpEuU18JPjVGQ+zuqSwHmwYFaNz6TxZLQI=

This seems to be the same problem as #62 (and you got the same bogus checksum, even though this is v2.1.2 and they were using v2.1.1). Are you using a module proxy?

Closing as a duplicate of #62, and because I don't believe there's any problem on the xxhash side.