I recently started using modules in Go, but I frequently encounter issues where everything works fine on one machine, but a checksum mismatch is encountered when building the codebase on another machine.
The issue always concerns the same third party dependency (github.com/ericlagergren/decimal):
go: verifying github.com/ericlagergren/[email protected]: checksum mismatch
downloaded: h1:HQGCJNlqt1dUs/BhtEKmqWd6LWS+DWYVxi9+Jo4r0jE=
go.sum: h1:x4oNpFLLl+8l+iLgksNHzZewTS0SKp6m0hlLwzXRbqA=
I've tried various things: removing & regenerating go.sum
, upgrading Go itself to the latest patch version and removing the dependency from go.mod
but nothing seems to fix this issue.
Does anyone have an idea how to fix this issue?
You can run go clean -modcache
and then go mod tidy
which will re-download all deps with the correct checksum (this updates the pkg cache in $GOPATH/pkg/mod/
).
To update vendor/
folder run: go mod vendor
.