1/5/2026
•
EN
go.sum Is Not a Lockfile
Clarifies that go.sum is a checksum cache, not a lockfile, and explains why go.mod is the true source for dependency versions in Go.