Unable to build due to checksum mismatch

[bjwrk]

Minimum reproducer:

go clean -modcache # careful
git clone https://github.com/Smartling/smartling-cli
cd smartling-cli
git checkout 441a05062fda9d1cbf706eed2719f7a4ab9d8653
GOPROXY=direct go build

Results in the following error:

go: downloading github.com/charmbracelet/x/ansi v0.9.3
verifying github.com/charmbracelet/x/ansi@v0.9.3: checksum mismatch
	downloaded: h1:N/UztZRAGcBZH0peJzdQkNQ/l9O2eSvAekrnQ7VdSOY=
	go.sum:     h1:BXt5DHS/MKF+LjuK4huWrC6NCvHtexww7dMayh6GXd0=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

It works fine if I set GOPROXY=, but that's just a workaround, GOPROXY=direct should work too.

[dimitrystd]

It works for me

$ go version
go version go1.24.4 linux/amd64
$ git rev-parse HEAD
441a05062fda9d1cbf706eed2719f7a4ab9d8653
$ go clean -modcache # careful
$ GOPROXY=direct go build

Could you please try make build or make all?

Please let me know if any additional steps are required to reproduce.

[bjwrk]

This still reliably reproduces it on my machine. I'll try it on another machine.

Seems others are having the same thing with charmbracelet: charmbracelet/gum#921