mirror of
https://github.com/hanzoai/s3-csi.git
synced 2026-09-30 23:52:32 +00:00
zeekayandHanzo Dev
8838c3ac29
The image build dies at `go mod download`: verifying github.com/hanzoai/[email protected]: checksum mismatch downloaded: h1:jyY5FGgOwXUT5gjuxYKAnvjmLNF3Mzchk6hfN0hqqec= go.sum: h1:/hb8vroa+abcz+FzhU3PsT+bVg2lBNMioi4CGc36uTU= SECURITY ERROR hanzoai/s3 v1.0.5 was re-cut after publication, so nothing reachable still serves what this lockfile expects. Reproduced independently here with a clean module cache against the PUBLIC proxy and GOSUMDB=sum.golang.org: the same mismatch, same two hashes. This build has no GOPRIVATE at all — GOPROXY is "https://proxy.golang.org,direct" — so there is no fetch path left that agrees with the pin. Rolling FORWARD rather than rewriting go.sum to the re-cut hash. Adopting the new bytes under the old version number would make this repo disagree with the signed database and would have to be redone the next time that tag moves. Checked which releases actually verify, clean cache each time: v1.0.5 MISMATCH v1.0.13 OK v1.0.14 OK v1.0.15 OK v1.0.15 is the newest and is a patch-level move within v1.0.x — no major bump. It pulled one transitive upgrade, google/uuid v1.6.0 -> v1.6.1-0.20241114… Verified: `go get` + `go mod tidy` exit 0 (so the whole graph verifies), `go build ./...` and `go vet ./...` are both clean for linux/amd64 with CGO_ENABLED=0 — the configuration the image actually builds — and a pristine `go mod download` reports zero mismatches. The local host cannot build cgo targets (its SDK is missing stdlib.h/errno.h), which is unrelated and is why the target triple is used for verification. Worth stating: this is the fourth re-cut first-party tag hit today (luxfi consensus and vm, hanzoai orm, now hanzoai s3). Re-cutting a published version breaks every consumer that pinned it, silently, until they next resolve. Co-authored-by: Hanzo Dev <[email protected]>
86 lines
3.5 KiB
AMPL
86 lines
3.5 KiB
AMPL
module github.com/hanzoai/s3-csi
|
|
|
|
go 1.26.5
|
|
|
|
require (
|
|
github.com/container-storage-interface/spec v1.11.0
|
|
golang.org/x/net v0.57.0
|
|
google.golang.org/grpc v1.82.1
|
|
k8s.io/client-go v0.32.0
|
|
)
|
|
|
|
require (
|
|
github.com/hanzoai/s3 v1.0.15
|
|
golang.org/x/sys v0.47.0
|
|
k8s.io/api v0.32.0
|
|
k8s.io/apimachinery v0.32.0
|
|
k8s.io/mount-utils v0.32.0
|
|
)
|
|
|
|
require (
|
|
github.com/aws/aws-sdk-go v1.55.8 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/cognusion/imaging v1.0.4 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/emicklei/go-restful/v3 v3.12.1 // indirect
|
|
github.com/fsnotify/fsnotify v1.9.0 // indirect
|
|
github.com/fxamacker/cbor/v2 v2.7.0 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-openapi/jsonpointer v0.21.0 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.0 // indirect
|
|
github.com/go-openapi/swag v0.23.0 // indirect
|
|
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
|
github.com/google/gnostic-models v0.6.9 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/gofuzz v1.2.0 // indirect
|
|
github.com/google/uuid v1.6.1-0.20241114170450-2d3c2a9cc518 // indirect
|
|
github.com/gorilla/mux v1.8.1 // indirect
|
|
github.com/hanzoai/goexif v1.0.4 // indirect
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
|
github.com/josharian/intern v1.0.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/mailru/easyjson v0.9.1 // indirect
|
|
github.com/moby/sys/mountinfo v0.7.2 // indirect
|
|
github.com/moby/sys/userns v0.1.0 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/prometheus/client_golang v1.24.0 // indirect
|
|
github.com/prometheus/client_model v0.6.2 // indirect
|
|
github.com/prometheus/common v0.70.0 // indirect
|
|
github.com/prometheus/procfs v0.21.1 // indirect
|
|
github.com/sagikazarmark/locafero v0.11.0 // indirect
|
|
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
|
|
github.com/spf13/afero v1.15.0 // indirect
|
|
github.com/spf13/cast v1.10.0 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/spf13/viper v1.21.0 // indirect
|
|
github.com/subosito/gotenv v1.6.0 // indirect
|
|
github.com/viant/ptrie v1.0.1 // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
github.com/zap-proto/go v1.8.2 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
golang.org/x/image v0.43.0 // indirect
|
|
golang.org/x/oauth2 v0.36.0 // indirect
|
|
golang.org/x/term v0.45.0 // indirect
|
|
golang.org/x/text v0.40.0 // indirect
|
|
golang.org/x/time v0.15.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/klog/v2 v2.130.1 // indirect
|
|
k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
|
|
k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
|
|
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
|
|
sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|