From 9757f7cf41254c01281b03f6249d69eb457c49a8 Mon Sep 17 00:00:00 2001 From: Andrei Aaron Date: Sun, 10 May 2026 20:35:59 +0300 Subject: [PATCH] ci: fix golangci-lint install URL (#4052) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 1. Cause SBOM assets were added to the release checksum file, so you get two lines that contain the same substring, e.g. …linux-amd64.tar.gz and …linux-amd64.tar.gz.sbom.json. The old install.sh logic used something like grep "${BASENAME}", so both lines matched. That breaks want (wrong or ambiguous hash) and shows up as checksum verification errors (including the 8df… vs fd3… style mismatch you debugged). 2. The upstream fix is in https://github.com/golangci/golangci-lint/pull/6539 The matcher was changed so the checksum line must end with the archive name — i.e. grep "${BASENAME}$" — so the .sbom.json line no longer matches. 3. In the same thread they say master on raw.githubusercontent.com is not the right branch anymore and recommend the canonical installer URL: https://golangci-lint.run/install.sh (see the PR description and local install / binaries.) Signed-off-by: Andrei Aaron --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 7f063ee8..3306005a 100644 --- a/Makefile +++ b/Makefile @@ -341,7 +341,7 @@ $(GOLINTER): $(TOOLSDIR)/.golangci-lint-$(GOLINTER_VERSION) $(TOOLSDIR)/.golangci-lint-$(GOLINTER_VERSION): mkdir -p $(TOOLSDIR)/bin rm -f $(TOOLSDIR)/.golangci-lint-* - curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(TOOLSDIR)/bin $(GOLINTER_VERSION) + curl -sSfL https://golangci-lint.run/install.sh | sh -s -- -b $(TOOLSDIR)/bin $(GOLINTER_VERSION) $(GOLINTER) version touch $@