dep init produces mismatching inputs digest

[tt]

What version of dep are you using (dep version)?

Version 0.4.1 (installed with Homebrew):

dep:
 version     : v0.4.1
 build date  : 2018-01-27
 git hash    : 37d9ea0
 go version  : go1.9.3
 go compiler : gc
 platform    : darwin/amd64

What dep command did you run?

I was migrating a project from govendor using dep init. I then ran dep status and got the following output:

Lock inputs-digest mismatch. This happens when Gopkg.toml is modified.
Run `dep ensure` to regenerate the inputs-digest.
input-digest mismatch

I staged the changes, ran dep ensure and had the following change:

diff --git a/Gopkg.lock b/Gopkg.lock
index abed7eb..c7b5f8f 100644
--- a/Gopkg.lock
+++ b/Gopkg.lock
@@ -72,6 _+72,6_ @@
 [solve-meta]
   analyzer-name = "dep"
   analyzer-version = 1
-  inputs-digest = "2aa006f517d53c26e0c23559f3cc6c1b81c47b3763629f4ada04886916669fef"
+  inputs-digest = "7c17d1a58a0a5668b56f58a7652fd8954ae31c10395d1b3f5d3157c7722ffa27"
   solver-name = "gps-cdcl"
   solver-version = 1

The source tree I was migrating is available at heroku/busl@f03e949a284f73fabdaf3ce80f89b8ccad04ec3a.

(It looks like a similar issue was previously tracked in #917.)

What did you expect to see?

I expect dep init to produce the same digest for the initial import as dep ensure will.

What did you see instead?

dep init produced a different value causing dep status to fail and dep ensure to modify the lock file.

[dmathieu]

I am reproducing this issue on a dep compiled from master on ubuntu.

dep:
 version     : devel
 build date  : 
 git hash    : 
 go version  : go1.9.2
 go compiler : gc
 platform    : linux/amd64