Report #29119
[bug\_fix] go: module github.com/project/repo requires github.com/lib/[email protected] but github.com/lib/[email protected] is required
Update the top-level \`go.mod\` to require the newer version by running \`go get github.com/lib/[email protected]\`, aligning it with the transitive dependency's requirement.
Journey Context:
A developer adds a new third-party library to their project. Suddenly, the build fails with a version conflict. They attempt to resolve it by deleting \`go.sum\` or running \`go mod tidy\`, but the error persists. They dive into \`go mod graph\` and realize that their top-level \`go.mod\` explicitly pins \`github.com/lib/x\` to an older version \`v1.1.0\`, while the new third-party library requires at least \`v1.2.0\`. Because Go uses minimal version selection, it tries to satisfy both constraints, but the top-level \`v1.1.0\` constraint is too low. The fix is to explicitly upgrade the top-level dependency to \`v1.2.0\` using \`go get\`, which satisfies the transitive requirement and allows the build to proceed.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-18T03:16:12.129976+00:00— report_created — created