Skip to content

Update github.com/charmbracelet/glamour to v0.10.0 #868

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

cfergeau
Copy link

I was getting build errors because of checksum mismatches with v0.9.1
Maybe charmbracelet/glamour overwrote their v0.9.1 tag?

go mod vendor -v
go: downloading github.com/charmbracelet/glamour v0.9.1
verifying github.com/charmbracelet/[email protected]: checksum mismatch
	downloaded: h1:Q7PdJLOx8EoepsXUvW6Puz5WQ3YUElIGQdYKrIpiGLA=
	go.sum:     h1:11dEfiGP8q1BEqvGoIjivuc2rBk+5qEXdPtaQ2WoiCM=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
make: *** [Makefile:36: deps] Error 1

The 0.10.0 release don’t have this problem.

@cfergeau
Copy link
Author

github actions fail with the errors I’m trying to fix :(

verifying github.com/charmbracelet/[email protected]: checksum mismatch
	downloaded: h1:MtZvfwsYCx8jEPFJm3rIBFIMZUfUJ765oX8V6kXldcY=
	go.sum:     h1:41/IYxsmIpaBjkMXjrjLwsHDBlucd5at6tY5n2r/qn4=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

I wonder what’s going on with this module :(

I was getting build errors because of checksum mismatches with v0.9.1
Maybe charmbracelet/glamour overwrote their v0.9.1 tag?
```
go mod vendor -v
go: downloading github.com/charmbracelet/glamour v0.9.1
verifying github.com/charmbracelet/[email protected]: checksum mismatch
	downloaded: h1:Q7PdJLOx8EoepsXUvW6Puz5WQ3YUElIGQdYKrIpiGLA=
	go.sum:     h1:11dEfiGP8q1BEqvGoIjivuc2rBk+5qEXdPtaQ2WoiCM=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
make: *** [Makefile:36: deps] Error 1
```

The 0.10.0 release don’t have this problem.

Signed-off-by: Christophe Fergeau <[email protected]>
@ankitpokhrel
Copy link
Owner

@cfergeau The update is working fine on my end so I think this is related to something on your end. I do see different checksum in your update compared to mine.

@cfergeau
Copy link
Author

@cfergeau The update is working fine on my end so I think this is related to something on your end. I do see different checksum in your update compared to mine.

I experimented with go clean -modcache && rm go.sum && go mod tidy (https://stackoverflow.com/questions/54133789/go-modules-checksum-mismatch) after setting GOSUMDB="sum.golang.org" (it was off on my fedora https://src.fedoraproject.org/rpms/golang/blob/rawhide/f/0001-Modify-go.env.patch )

After doing this, I always get checksum failures, be it with 0.9.1 or 0.10.0. Not sure what’s going on.

@cfergeau
Copy link
Author

After doing this, I always get checksum failures, be it with 0.9.1 or 0.10.0. Not sure what’s going on.

Setting GOPROXY=https://proxy.golang.org,direct helps though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants