Build fails because of missing dependency

[mvasl]

Running go mod tidy after cloning repo complains about opentelemetry package not containing required module

go: downloading go.opentelemetry.io/otel/metric v0.30.0
github.com/ckotzbauer/vulnerability-operator/internal/vuln/grype imports
	github.com/anchore/grype/grype/pkg imports
	github.com/sigstore/cosign/pkg/signature imports
	github.com/sigstore/cosign/pkg/cosign imports
	github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier/ctl imports
	github.com/google/certificate-transparency-go imports
	go.etcd.io/etcd/v3 imports
	go.etcd.io/etcd/tests/v3/integration imports
	go.etcd.io/etcd/server/v3/embed imports
	go.opentelemetry.io/otel/semconv: module go.opentelemetry.io/otel@latest found (v1.7.0), but does not contain package go.opentelemetry.io/otel/semconv
github.com/ckotzbauer/vulnerability-operator/internal/vuln/grype imports
	github.com/anchore/grype/grype/pkg imports
	github.com/sigstore/cosign/pkg/signature imports
	github.com/sigstore/cosign/pkg/cosign imports
	github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier/ctl imports
	github.com/google/certificate-transparency-go imports
	go.etcd.io/etcd/v3 imports
	go.etcd.io/etcd/tests/v3/integration imports
	go.etcd.io/etcd/server/v3/embed imports
	go.opentelemetry.io/otel/exporters/otlp imports
	go.opentelemetry.io/otel/sdk/metric/controller/basic imports
	go.opentelemetry.io/otel/metric/registry: module go.opentelemetry.io/otel/metric@latest found (v0.30.0), but does not contain package go.opentelemetry.io/otel/metric/registry

[ckotzbauer]

Can't reproduce this behaviour. Just did a go mod tidy and pushed the result (two lines removed), also the build is green (it also runs a go mod tidy). Which go version do you use?

[mvasl]

I tried this on 2 separate machines on diffirent networks, one was running go 1.18.1 linux/amd64 on lubuntu 21.10, second was on macOS Monterey 12.3, go1.18.2 darwin/arm64. Same results.

Can you try again, but with all module caches cleared?

[ckotzbauer]

I will try it later, yes. Weird problem

[ckotzbauer]

It worked for me with cleaned caches on my linux/amd64 with go 1.18.2
If there would be an issue in general, the Github build would also fail, as this is always an isolated environment.

[ckotzbauer]

The problem came now up with the latest dependency-updates. I solved it by replacing the indirect etcd version 3.5.2 with 3.6.0-alpha.0. This issue was caused by a breaking change of opentelemetry.
open-telemetry/opentelemetry-go#2577 (comment)