lux/chains
2
0
Fork 0
mirror of https://github.com/luxfi/chains.git synced 2026-09-24 00:26:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Retract v1.7.7

Browse Source 
It does not name one body of code: the proxy and the checksum database hold
what it was published with and always will, GitHub serves something else,
and go.sum files in this org have held a third. Builds through the proxy and
builds that go direct disagree, and the direct ones only look fine because
GOPRIVATE skips the checksum database — a checksum SECURITY ERROR waiting
for the first consumer who builds without it.

Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
zeekay
2026-09-17 20:56:19 -07:00
co-authored by Hanzo Dev
parent 5532c64501
commit f4d3133bb7
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go.mod
+12
View File
@@ -221,6 +221,18 @@ require (
gopkg.in/yaml.v3 v3.0.1 // indirect
)
// v1.7.7 does not name one body of code. proxy.golang.org and sum.golang.org
// hold the content it was published with and always will, because a published
// version is immutable to them; GitHub serves something else, and go.sum files
// in this org have held a third. Builds through the proxy and builds that go
// direct therefore disagree, and the direct ones only look fine because
// GOPRIVATE skips the checksum database — so this is a checksum SECURITY ERROR
// waiting for the first consumer who builds without it.
//
// The answer to a moved tag is a new version, never a re-pointed one. Use
// v1.7.8 or later.
retract v1.7.7
// v1.7.37 branched from a commit before v1.7.36 and carries a higher number
// than the release it does not contain: 38 commits are missing, among them the
// fix that stops a store reading any failed tip read as a fresh chain. A module