checksum mismatch

[vrischmann]

Describe the bug

I'm trying out the Chat example but I'm getting a checksum mismatch:

$ go get -t ./...
go: downloading github.com/charmbracelet/bubbles v0.21.0
go: downloading github.com/atotto/clipboard v0.1.4
go: downloading github.com/charmbracelet/x/ansi v0.9.3
go: downloading golang.org/x/text v0.3.8
go: test-bubbletea imports
	github.com/charmbracelet/bubbles/textarea imports
	github.com/charmbracelet/x/ansi: github.com/charmbracelet/x/[email protected]: verifying module: checksum mismatch
	downloaded: h1:N/UztZRAGcBZH0peJzdQkNQ/l9O2eSvAekrnQ7VdSOY=
	sum.golang.org: h1:BXt5DHS/MKF+LjuK4huWrC6NCvHtexww7dMayh6GXd0=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

Setup

• macOS
• fish
• kitty
• no terminal multiplexer

To Reproduce

1. Make a new go module with go mod init foobar
2. Copy this file: https://github.com/charmbracelet/bubbletea/blob/main/examples/chat/main.go
3. Run go get ./...

Source Code Please include source code if needed to reproduce the behavior.

Expected behavior

I expect go get to work.

Screenshots Add screenshots to help explain your problem.

Additional context Add any other context about the problem here.

[taigrr]

it's working for me, maybe it was a temporary error?

[vrischmann]

it's working for me, maybe it was a temporary error?

ok, I just checked again and I didn't realize before that the problem only occurs when using GOPROXY=direct which I use by default. With GOPROXY=proxy.golang.org go get ./... it works fine:

go: downloading github.com/charmbracelet/x/ansi v0.9.3
go: added github.com/atotto/clipboard v0.1.4
go: added github.com/aymanbagabas/go-osc52/v2 v2.0.1
go: added github.com/charmbracelet/bubbles v0.21.0
go: added github.com/charmbracelet/bubbletea v1.3.6
go: added github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
go: added github.com/charmbracelet/lipgloss v1.1.0
go: added github.com/charmbracelet/x/ansi v0.9.3
go: added github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
go: added github.com/charmbracelet/x/term v0.2.1
go: added github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f
go: added github.com/lucasb-eyer/go-colorful v1.2.0
go: added github.com/mattn/go-isatty v0.0.20
go: added github.com/mattn/go-localereader v0.0.1
go: added github.com/mattn/go-runewidth v0.0.16
go: added github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6
go: added github.com/muesli/cancelreader v0.2.2
go: added github.com/muesli/termenv v0.16.0
go: added github.com/rivo/uniseg v0.4.7
go: added github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
go: added golang.org/x/sync v0.15.0
go: added golang.org/x/sys v0.33.0
go: added golang.org/x/text v0.3.8

[yhakbar]

FWIW, I asked about this in Discord a while ago: https://discord.com/channels/1032368467246075914/1383198045260484658

I believe the devs accidentally pushed one or more ansi tags weirdly, resulting in checksum mismatches when using GOPROXY = direct.

I think cutting another tag without GOPRIVATE set should fix the issue.

[meowgorithm]

@aymanbagabas Worth cutting another release here? I encounter it a lot too, with the solution usually being sudo rm -rf "$GOPATH/pkg".