Bug: Checksum mismatch (dlv)

[BrandonStudio]

What is the output when you execute the go version command?

$ go version

go version go1.26.0 linux/amd64

What is the output when you execute the go env command?

go env Output

$ go env

AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE=''
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/home/brandon/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/home/brandon/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2781516727=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/home/brandon/repo/synctv/go.mod'
GOMODCACHE='/home/brandon/go/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/home/brandon/go'
GOPRIVATE=''
GOPROXY='https://goproxy.cn,direct'
GOROOT='/opt/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/home/brandon/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/opt/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.26.0'
GOWORK=''
PKG_CONFIG='pkg-config

What did you do?

go install -v github.com/go-delve/delve/cmd/dlv@latest

What is the behavior of the bug?

go: downloading github.com/go-delve/delve v1.26.0
go: github.com/go-delve/delve/cmd/dlv@latest: github.com/go-delve/delve@v1.26.0: verifying module: checksum mismatch
	downloaded: h1:Lmnf2V/oFM/cmF76Ez8Bbzf2IOvhjqfouNGmVVgb1Z8=
	sum.golang.org: h1:YZT1kXD76mxba4/wr+tyUa/tSmy7qzoDsmxutT42PIs=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

Do you have any guesses?

[aofei]

Works fine on my side. There could be a few reasons, and one possible cause is a local cache issue. Could you try running go clean -modcache first, then run go install again and see how it goes?

[BrandonStudio]

I ran

go install -v github.com/go-delve/delve/cmd/dlv@v1.26

and succeeded, which makes the issue more wierd