search

emicklei / go-restful

package for building REST-style Web Services using Go
MIT License
5.04k stars 690 forks source link

v3.11.1 checksum mismatch #542

Closed alecholmez closed 7 months ago

alecholmez commented 8 months ago

Fetching v3.11.1 causes a checksum mismatch:

go: downloading github.com/emicklei/go-restful/v3 v3.11.1
verifying github.com/emicklei/go-restful/v3@v3.11.1: checksum mismatch
    downloaded: h1:PZ8lyY5omynnq9Y2BHKmNqkC3AnPMES2e2bg7slcfzw=
    go.sum:     h1:S+9bSbua1z3FgCnV0KKOSSZ3mDthb5NyEPL5gEpCvyk=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

I suspect it's because of the 2 tags pointed at the same commit. I was able to force a replace in go.mod to workaround but wanted to raise an issue for awareness:

replace http://github.com/emicklei/go-restful/v3 => http://github.com/emicklei/go-restful/v3 v3.11.2
emicklei commented 8 months ago

hi, thank you for reporting this. I will fix this

emicklei commented 8 months ago

the latest commit is now tagged with v3.11.3