mirror of
https://github.com/luxfi/qzmq.git
synced 2026-10-30 15:20:19 +00:00
zeekay
2c360b8b1a
Several luxfi versions carry TWO different contents across this workspace, because published tags were moved instead of a new patch being cut: [email protected], [email protected], [email protected], [email protected], [email protected]. Adjudicated before editing, since "checksum mismatch / SECURITY ERROR" is also what a real supply-chain attack looks like. It is not one here: sum.golang.org holds the OLD hash while proxy.golang.org and a direct fetch BOTH serve the same NEW bytes. Two independent transports agreeing means nothing is rewriting content in flight — the tag moved at source. The sumdb entry is a fossil: GOPRIVATE covers github.com/luxfi/* with GOSUMDB=off, so our own modules never consult the checksum DB and a moved tag splits consumers silently. The old bytes are served by nothing now, so a stale pin can never build. Corrected to the only content that exists, in BOTH line forms (h1: and /go.mod h1:) — Go reports these one at a time, so a partial fix just relocates the error. Deliberately no `go mod tidy`: this changes no selected version, only the recorded hash of versions already chosen. Verified: `go list -m all` resolves with no checksum error. The durable fix is upstream: never move a published tag, cut x.y.z+1 instead.
21 lines
1.6 KiB
Plaintext
21 lines
1.6 KiB
Plaintext
github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
|
|
github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
|
|
github.com/luxfi/accel v1.0.7 h1:ksHieAp50umwqxqgyHk9WiOmXM54kia3IEDb5H7FsM8=
|
|
github.com/luxfi/accel v1.0.7/go.mod h1:iZD3oxffiMEIT/KvzD8bgwC/cBn4AYlMW3QJpbRa4RE=
|
|
github.com/luxfi/crypto v1.19.0 h1:VtH6kvZrCEjCnkHPkhExDU+GJ0ZulYX4rnA+lXJdJHw=
|
|
github.com/luxfi/crypto v1.19.0/go.mod h1:ee525i8Recbpb0jVTDZYZBr1MmvJ27OITJHZ/nlNMBw=
|
|
github.com/luxfi/czmq/v4 v4.2.2 h1:D4QDl99OfGoi8Gk3RI8GZ6pqt+040rolj+h36scSj2M=
|
|
github.com/luxfi/czmq/v4 v4.2.2/go.mod h1:WFY9ldUbeU900P8bcIRr7Jim23veOhJL5A5zSpTogdU=
|
|
github.com/luxfi/zmq/v4 v4.2.3 h1:9nfkxxC8kAcfCnbeDQ+77X7V3qzfSIdAWMeT4zo5w4U=
|
|
github.com/luxfi/zmq/v4 v4.2.3/go.mod h1:naL5DrI3x3GFuMhH5XG1zj5oqsBH46znVfIPhcRyOYc=
|
|
github.com/tilinna/z85 v1.0.0 h1:uqFnJBlD01dosSeo5sK1G1YGbPuwqVHqR+12OJDRjUw=
|
|
github.com/tilinna/z85 v1.0.0/go.mod h1:EfpFU/DUY4ddEy6CRvk2l+UQNEzHbh+bqBQS+04Nkxs=
|
|
golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=
|
|
golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio=
|
|
golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
|
|
golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
|
|
golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
|
|
golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
|
|
golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=
|
|
golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4=
|