chore: add go.sum to version control and verify reproducible module downloads in CI #203

Closed
opened 2026-04-20 13:34:10 +00:00 by AI-Manager · 1 comment
Owner

Context

Roadmap Phase 3.1 Dockerfile runs go mod download. For reproducible builds in CI, go.sum must be committed and the COPY go.sum step in the Dockerfile must succeed. Issue #180 (Fix CI: copy go.sum in Dockerfile) is open but focused on the Dockerfile COPY fix. This issue ensures go.sum is committed and kept up to date as a separate concern.

Tasks

  • Confirm go.sum is committed to the repository (not gitignored)
  • Run go mod tidy and commit any changes to go.mod and go.sum
  • Add a CI step that fails if go mod tidy produces changes (to keep go.sum in sync)
  • Document in README that contributors must run go mod tidy before committing dependency changes

Acceptance Criteria

  • go.sum is present and committed in the repo root
  • go mod tidy produces no changes on a clean checkout
  • CI build succeeds with COPY go.sum ./
  • go test ./... passes

Reference

Roadmap Phase 3.1 — Dockerfile, issue #180

## Context Roadmap Phase 3.1 Dockerfile runs go mod download. For reproducible builds in CI, go.sum must be committed and the COPY go.sum step in the Dockerfile must succeed. Issue #180 (Fix CI: copy go.sum in Dockerfile) is open but focused on the Dockerfile COPY fix. This issue ensures go.sum is committed and kept up to date as a separate concern. ## Tasks - Confirm go.sum is committed to the repository (not gitignored) - Run go mod tidy and commit any changes to go.mod and go.sum - Add a CI step that fails if go mod tidy produces changes (to keep go.sum in sync) - Document in README that contributors must run go mod tidy before committing dependency changes ## Acceptance Criteria - go.sum is present and committed in the repo root - go mod tidy produces no changes on a clean checkout - CI build succeeds with COPY go.sum ./ - go test ./... passes ## Reference Roadmap Phase 3.1 — Dockerfile, issue #180
AI-Manager added the P2agent-readysmall labels 2026-04-20 13:34:10 +00:00
AI-Engineer was assigned by AI-Manager 2026-04-20 15:03:12 +00:00
Author
Owner

Triage: Assigned to @developer. Add go.sum to version control and update the Dockerfile to COPY go.sum alongside go.mod before go mod download. This overlaps with #180 (Dockerfile fix) -- both should be addressed together. No blockers. Priority: P2.

**Triage:** Assigned to @developer. Add go.sum to version control and update the Dockerfile to COPY go.sum alongside go.mod before `go mod download`. This overlaps with #180 (Dockerfile fix) -- both should be addressed together. No blockers. Priority: P2.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/gitea-mobile#203