Does this issue reproduce with the latest release?
yes
What did you see instead?
amdahliu@AMDAHLIU-MB1 examples % docker compose up -d
[+] Building 5.3s (13/15) docker:desktop-linux
=> [server internal] load build definition from Dockerfile 0.0s
=> => transferring dockerfile: 3.20kB 0.0s
=> [server] resolve image config for docker-image://docker.io/docker/dockerfile:1 1.7s
=> CACHED [server] docker-image://docker.io/docker/dockerfile:1@sha256:a57df69d0ea827fb72 0.0s
=> [server internal] load metadata for docker.io/library/golang:1.18 1.5s
=> [server internal] load metadata for docker.io/library/alpine:latest 1.5s
=> [server internal] load .dockerignore 0.0s
=> => transferring context: 647B 0.0s
=> [server build 1/4] FROM docker.io/library/golang:1.18@sha256:50c889275d26f816b5314fc99 0.0s
=> [server final 1/4] FROM docker.io/library/alpine:latest@sha256:77726ef6b57ddf65bb55189 0.0s
=> [server internal] load build context 0.0s
=> => transferring context: 10.05kB 0.0s
=> CACHED [server final 2/4] RUN --mount=type=cache,target=/var/cache/apk apk --updat 0.0s
=> CACHED [server final 3/4] RUN adduser --disabled-password --gecos "" --hom 0.0s
=> CACHED [server build 2/4] WORKDIR /src 0.0s
=> ERROR [server build 3/4] RUN --mount=type=cache,target=/go/pkg/mod/ --mount=type=b 1.9s
------
> [server build 3/4] RUN --mount=type=cache,target=/go/pkg/mod/ --mount=type=bind,source=go.sum,target=go.sum --mount=type=bind,source=go.mod,target=go.mod go mod download -x:
0.091 # get https://proxy.golang.org/trpc.group/trpc-go/trpc-go/@v/v1.0.3.zip
0.748 # get https://proxy.golang.org/trpc.group/trpc-go/trpc-go/@v/v1.0.3.zip: 200 OK (0.656s)
1.886 verifying trpc.group/trpc-go/trpc-go@v1.0.3: checksum mismatch
1.886 downloaded: h1:X4RhPmJOkVoK6EGKoV241dvEpB6EagBeyu3ZrqkYZQY=
1.886 go.sum: h1:5VzmsBX1MFanUI6fwa1GwAvE68CoxxMeQpHxCHmyews=
1.886
1.886 SECURITY ERROR
1.886 This download does NOT match an earlier download recorded in go.sum.
1.886 The bits may have been replaced on the origin server, or an attacker may
1.886 have intercepted the download attempt.
1.886
1.886 For more information, see 'go help module-auth'.
------
failed to solve: process "/bin/sh -c go mod download -x" did not complete successfully: exit code: 1
What version of tRPC-Go are you using?
v1.0.3
Does this issue reproduce with the latest release?
yes
What did you see instead?