@golang_discussions what do you do if you accidently put a password in your repo and its part of the tagged commit? You delete the tag, you delete or rewrite the history as needed, and you just SKIP that version. NEVER EVER reuse a version tag with a changed commit FOR ANY REASON whatsoever, period. If you do so, you should be publicly shamed. The tooling is doing the correct thing here.