v0.12.1 hash was changed?

[AkihiroSuda]

The go.sum hash for hcsshim v0.12.1 was apparently changed?

Originally reported in

• hcsshim hash mismatch on main containerd/nerdctl#2901

[codingben]

I have the same error in my local machine. What's going on? do we have maintainers of this project to check it?

[darktohka]

Same, this needs to be looked into. Until then v0.12.1 cannot be trusted

[cpl]

Assuming you don't need anything from v0.12.1 specifically, and you trust v0.12.0, you can use (in your Go mod):

replace github.com/Microsoft/hcsshim v0.12.1 => github.com/Microsoft/hcsshim v0.12.0

until they figure out what went wrong with the release of .1 and do a .2 working release.

[anmaxvl]

Thanks for reporting this. I just retagged with v0.12.2.

We've made some updates to Github actions and the new version of the job that publishes the binaries seems to be creating a release automatically. I don't recall it doing that in the past. I didn't realize that the release has already been published when I pushed a new v0.12.1 tag. Instead of retagging I tried to re-release with what I intended to.

[darktohka]

Thank you so much @anmaxvl!

[AkihiroSuda]

Thank you!