vendor: Fix incorrect checksums + run 'go mod verify' #20140
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
go.sum
has a number of incorrect checksums, most likely as a result of a bug in go modules in Go<1.11.4
(as described in golang/go#29278 or golang/go#27093).This PR is just a result of the following sequence of commands ran until they all eventually succeed:
go mod verify go get ./... # Removal of offending dependency from go.sum
To prevent this from happening again we have one safeguard already in place -
.go-version
pinning Go to version which doesn't suffer from this bug and I'm also addinggo mod verify
to Travis as an extra check.