search

aerospike / aerospike-client-go

Aerospike Client Go
Apache License 2.0
429 stars 199 forks source link

v5.9.0 retagged? #386

Closed Aneurysm9 closed 1 year ago

Aneurysm9 commented 1 year ago

I have encountered a checksum mismatch attempting to use github.com/aerospike/aerospike-client-go/v5@v5.9.0. This happens when using GOPROXY=direct, which is a requirement for me. Was the tag for this release modified at some point? Can a v5.10.0 be tagged to allow the module resolver to be placated.

verifying github.com/aerospike/aerospike-client-go/v5@v5.9.0: checksum mismatch
        downloaded: h1:9YM7hGTKjkNjE/VPa5q4teFcsq9jLBJmifNHoTYH40U=
        go.sum:     h1:x5qdd0jLTPLh8mXIDsMszDoXSJzDo/wSGeo3EOLIdsc=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
khaf commented 1 year ago

IIRC I deleted and reissued that release immediately after the initial release. Is it not possible to delete what you have in your Go sum and cache and and download it again?

khaf commented 1 year ago

Did you resolve this issue or do you still need a re-release?

Aneurysm9 commented 1 year ago

We have had multiple reports of this issue, including some reporting that clearing caches was ineffective as an attempted resolution.

khaf commented 1 year ago

v5.9.1 released to address this issue.