Fix: regenerate token-broker go.sum for renamed cortex authlib#490
Fix: regenerate token-broker go.sum for renamed cortex authlib#490Ibrahim2595 wants to merge 1 commit into
Conversation
Follow-up to the cortex rename (rossoctl/cortex#680, now merged): token-broker pinned the pre-rename cortex authlib commit v0.0.0-20260619001334-ce3417655ee8, whose go.mod declared github.com/rossoctl/rossocortex/authbridge/authlib — a module-path mismatch, and go.sum had no matching checksum (the placeholder was removed earlier since it couldn't be valid until cortex published the cortex/ path). Bumped github.com/rossoctl/cortex/authbridge/authlib to the post-rename commit v0.0.0-20260720192358-48fb3c767572 and regenerated real go.sum via `go mod tidy` (also pulls the transitive x/crypto, x/sys bumps authlib now requires). Verification: token-broker go build ✅, go vet ✅, go test ✅ (8 pkgs, 0 fail). This closes the last cross-repo go.sum gap from the rename. Related to rossoctl/rossoctl#1972 Assisted-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: IBRAHIM IBRAHIM <66755652+Ibrahim2595@users.noreply.github.com>
cwiklik
left a comment
cwiklik
left a comment
There was a problem hiding this comment.
Closes the last cross-repo go.sum gap from the Rosso rename: bumps token-broker's dependency from the pre-rename cortex authlib pseudo-version to the post-rename github.com/rossoctl/cortex/authbridge/authlib v0.0.0-20260720192358-48fb3c767572 and regenerates go.sum via go mod tidy.
Verified:
- No leftover pre-rename
rossocortexin go.sum — the rename is fully applied. - authlib appears with both
h1:and/go.modchecksums; all added modules resolve fromgithub.com/golang.org(no unexpected hosts). go mod tidyalso incidentally bumped thegodirective (1.26.0→1.26.4), testify (1.10→1.11.1), and the transitive x/crypto·x/sys·jwx·secp256k1 set — normal tidy side-effects; build/vet/test reported green.
CI note: E2E Tests is failing for an unrelated reason — the suite fails pulling ghcr.io/rossoctl/cortex/authbridge-envoy:latest (denied), i.e. the renamed cortex image isn't published/public under the new namespace yet. That's rename image-publishing fallout, not caused by this go.sum change (this PR touches only token-broker deps). It will, however, keep the E2E gate red until that image is available.
LGTM. Single signed commit, no .claude/.vscode.
Assisted-By: Claude Code
2 participants
Summary
Closing the last cross-repo
go.sumgap from the rename, now that cortex #680 is merged.token-brokerpinned the pre-rename cortex authlib commitv0.0.0-20260619001334-ce3417655ee8(its go.mod declaredgithub.com/rossoctl/rossocortex/authbridge/authlib— a module-path mismatch), andgo.sumhad no checksum (the placeholder was removed earlier since it couldn't be valid until cortex published thecortex/path).github.com/rossoctl/cortex/authbridge/authlib→ post-renamev0.0.0-20260720192358-48fb3c767572go.sumviago mod tidy(incl. the transitive x/crypto, x/sys bumps authlib now requires)Verification
token-broker:go build✅,go vet✅,go test✅ (8 pkgs, 0 fail)Related issue(s)
Related to rossoctl/rossoctl#1972