[BUG] go module v5.6.2 verifying module: checksum mismatch

[yegortokmakov]

What did you do

go env -w GOPROXY=direct
go get github.com/k3d-io/k3d/v5

What did you expect to happen

get the package

Screenshots or terminal output

go: downloading github.com/k3d-io/k3d/v5 v5.6.2
go: github.com/k3d-io/k3d/v5@v5.6.2: verifying module: checksum mismatch
	downloaded: h1:AxWGxRqxgsNGGtcOpNZWQiZ22ezoALZXBBOUfWCVMfg=
	sum.golang.org: h1:nuMLn3j4QmF3AVCOGI7iSVpQdI82QKnYDrN0LqzMgmo=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

go version go1.22.2 linux/amd64

[yegortokmakov]

manually adding hash to go.sum helped:
github.com/k3d-io/k3d/v5 v5.6.2 h1:AxWGxRqxgsNGGtcOpNZWQiZ22ezoALZXBBOUfWCVMfg=

any chance the tag was overwritten and proxy/gosumdb got out of sync?

[iwilltry42]

That's probably because v5.6.2 Tag was moved to a new commit, because of some pipeline error.
I'll tag a new one to get this fixed.

[yegortokmakov]

confirmed fix in 5.6.3. thanks!