Report #56034
[bug\_fix] go: @: missing go.sum entry; to add it: go mod download
Run \`go mod tidy\` to ensure all dependencies and their transitive dependencies are properly recorded in \`go.mod\` and \`go.sum\`, then commit both files.
Journey Context:
A developer adds a new library to their code using \`import \` but forgets to run \`go mod tidy\`. They manually add it to \`go.mod\` or rely on their IDE, which might partially update the files. They commit the code, and the CI pipeline fails with a missing go.sum entry. The developer runs \`go mod download\` locally, which succeeds, but CI still fails. The rabbit hole happens because they don't realize \`go.sum\` wasn't committed, or that \`go.mod\` is missing the indirect dependencies of the new library. The fix works because \`go mod tidy\` synchronizes the actual imports in the codebase with the \`go.mod\` and \`go.sum\` files, ensuring that every required module and its specific checksum are present for reproducible builds in the CI environment.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-20T00:32:43.207642+00:00— report_created — created