[GH-ISSUE #3646] verifying github.com/google/flatbuffers@v1.12.0: checksum mismatch #64286

Closed
opened 2026-05-03 16:56:35 -05:00 by GiteaMirror · 3 comments
Owner

Originally created by @juhp on GitHub (Apr 15, 2024).
Original GitHub issue: https://github.com/ollama/ollama/issues/3646

What is the issue?

A clean checkout and build of ollama fails like google/flatbuffers#6466

What did you expect to see?

No checksum error

The easiest solution is bump the flatbuffers dependency to v1.12.1 which works around this upstream issue.

Steps to reproduce

[~/go]$ git clone -q https://github.com/ollama/ollama.git
[~/go]$ cd ollama
[~/go/ollama:main]$ go generate ./...
go: downloading github.com/google/uuid v1.0.0
verifying github.com/google/flatbuffers@v1.12.0: checksum mismatch
	downloaded: h1:N8EguYFm2wwdpoNcpchQY0tPs85vOJkboFb2dPxmixo=
	go.sum:     h1:/PtAHvnBY4Kqnx/xCQ3OIV9uYcSFGScBsWI3Oogeh6w=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

Are there any recent changes that introduced the issue?

No response

OS

Linux

Architecture

amd64

Platform

No response

Ollama version

No response

GPU

No response

GPU info

No response

CPU

No response

Other software

No response

Originally created by @juhp on GitHub (Apr 15, 2024). Original GitHub issue: https://github.com/ollama/ollama/issues/3646 ### What is the issue? A clean checkout and build of ollama fails like google/flatbuffers#6466 ### What did you expect to see? No checksum error The easiest solution is bump the flatbuffers dependency to v1.12.1 which works around this upstream issue. ### Steps to reproduce ```shellsession [~/go]$ git clone -q https://github.com/ollama/ollama.git [~/go]$ cd ollama [~/go/ollama:main]$ go generate ./... go: downloading github.com/google/uuid v1.0.0 verifying github.com/google/flatbuffers@v1.12.0: checksum mismatch downloaded: h1:N8EguYFm2wwdpoNcpchQY0tPs85vOJkboFb2dPxmixo= go.sum: h1:/PtAHvnBY4Kqnx/xCQ3OIV9uYcSFGScBsWI3Oogeh6w= SECURITY ERROR This download does NOT match an earlier download recorded in go.sum. The bits may have been replaced on the origin server, or an attacker may have intercepted the download attempt. For more information, see 'go help module-auth'. ``` ### Are there any recent changes that introduced the issue? _No response_ ### OS Linux ### Architecture amd64 ### Platform _No response_ ### Ollama version _No response_ ### GPU _No response_ ### GPU info _No response_ ### CPU _No response_ ### Other software _No response_
GiteaMirror added the bug label 2026-05-03 16:56:35 -05:00
Author
Owner

@jmorganca commented on GitHub (Apr 15, 2024):

Hi @juhp I can't seem to reproduce this after trying on many different systems. Is it something with your local go mod cache or perhaps version of Go? Will close for now but do let me know if not

<!-- gh-comment-id:2057631726 --> @jmorganca commented on GitHub (Apr 15, 2024): Hi @juhp I can't seem to reproduce this after trying on many different systems. Is it something with your local go mod cache or perhaps version of Go? Will close for now but do let me know if not
Author
Owner

@juhp commented on GitHub (Apr 16, 2024):

I commented in the PR

<!-- gh-comment-id:2058049876 --> @juhp commented on GitHub (Apr 16, 2024): I commented in the PR
Author
Owner

@chenpei2 commented on GitHub (Apr 17, 2024):

The same checksum mismatch problem and solved with this PR: https://github.com/ollama/ollama/pull/3649

<!-- gh-comment-id:2060607689 --> @chenpei2 commented on GitHub (Apr 17, 2024): The same checksum mismatch problem and solved with this PR: https://github.com/ollama/ollama/pull/3649
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#64286