wrong gomod update of digest

[dominikholler]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

github

Please tell us more about your question or problem

In dominikholler/ssp-operator@e554a8d#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6L15
the line

	github.com/openshift/library-go v0.0.0-20240711192904-190fec8c3f09 // release-4.16

is updated to

	github.com/openshift/library-go 5e8bc5632028 // release-4.16

marked with the comment in dominikholler/ssp-operator@e554a8d#r151256912

but according to
https://pkg.go.dev/github.com/openshift/library-go?tab=versions
the updated line should similar to

	github.com/openshift/library-go v0.0.0-20250109110153-5e8bc5632028 // release-4.16

The triggered implementation seems to be in https://github.com/renovatebot/renovate/blame/76ff1df549fc0f32730bf675e5e76f9e94e5fed9/lib/modules/manager/gomod/update.ts#L95 .

Is the description of the issue already usable, or is a minimal reproducer required?

Logs (if relevant)

Please find the complete log in https://gist.github.com/dominikholler/851601195c8b8e1b553a7a1e2038c375

The most relevant lines in the log might be

DEBUG: Updating github.com/openshift/api in api/go.mod (repository=dominikholler/ssp-operator, baseBranch=main, branch=renovate/all)
DEBUG: gomod.updateDependency: v0.0.0-20250109110153-5e8bc5632028 (repository=dominikholler/ssp-operator, baseBranch=main, branch=renovate/all)
DEBUG: gomod: need to update digest (repository=dominikholler/ssp-operator, baseBranch=main, branch=renovate/all)
       "depName": "github.com/openshift/library-go",
       "lineToChange": "\tgithub.com/openshift/library-go v0.0.0-20240711192904-190fec8c3f09 // release-4.16",
       "newDigestRightSized": "5e8bc5632028"
DEBUG: Updating github.com/openshift/library-go in go.mod (repository=dominikholler/ssp-operator, baseBranch=main, branch=renovate/all)

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

If you need help with running renovate on your minimal reproduction repository, please refer to our Running Renovate guide.
Good luck,

The Renovate team

[dominikholler]

Seems like gomodules/jsonpatch#28 is confusing renovate.