Dapr 1.7.0 checksum mismatch
- Dominant language
- Go
- Stars
- 479
- Forks
- 187
- PR merge metrics
- No merged PRs in 30d
Description
**Describe the bug**
When using Dependabot to update dependencies it is currently failing due to an issue with the checksum for the `1.7.0` release with the following error:
```console
verifying github.com/dapr/go-sdk@v1.7.0: checksum mismatch
```
I found a related issue to this in dependabot-core: https://github.com/dependabot/dependabot-core/issues/3073
**To Reproduce**
Use dependabot to manage go.mod dependencies in a repo that requires the Dapr go-sdk.
**Expected behavior**
The checksum should not fail and dependabot should be able to perform a dependency check.
Contributor guide
Research direction
Start by reproducing the Dependabot update against a repository whose go.mod requires github.com/dapr/go-sdk@v1.7.0, then compare the reported checksum with the release and the related dependabot-core issue 3073. Done means Dependabot can resolve and check the dependency without a checksum mismatch.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100