Ignore go.sum in file patterns and treat go.mod as a lockfile

Author: andrew

CHANGELOG.md

@@ -1,5 +1,7 @@
 ## [Unreleased]
 
+- Ignore go.sum (checksums only), treat go.mod as lockfile
+
 ## [0.6.1] - 2026-01-05
 
 - Fix `stats` command crash on most changed dependencies query

lib/git/pkgs/analyzer.rb

@@ -18,7 +18,7 @@ class Analyzer
         pom.xml ivy.xml build.gradle build.gradle.kts gradle-dependencies-q.txt
         maven-resolved-dependencies.txt sbt-update-full.txt maven-dependency-tree.txt maven-dependency-tree.dot
         Cargo.toml Cargo.lock
-        go.mod go.sum glide.yaml glide.lock Godeps Godeps/Godeps.json
+        go.mod glide.yaml glide.lock Godeps Godeps/Godeps.json
         vendor/manifest vendor/vendor.json Gopkg.toml Gopkg.lock go-resolved-dependencies.json
         composer.json composer.lock
         Podfile Podfile.lock *.podspec *.podspec.json

lib/git/pkgs/commands/diff_driver.rb

@@ -23,7 +23,7 @@ class DiffDriver
           composer.lock
           gems.locked
           glide.lock
-          go.sum
+          go.mod
           mix.lock
           npm-shrinkwrap.json
           package-lock.json

lib/git/pkgs/config.rb

@@ -5,14 +5,15 @@
 module Git
   module Pkgs
     module Config
-      # File patterns ignored by default (SBOM formats not supported)
+      # File patterns ignored by default (SBOM formats not supported, go.sum is checksums only)
       DEFAULT_IGNORED_FILES = %w[
         cyclonedx.xml
         cyclonedx.json
         *.cdx.xml
         *.cdx.json
         *.spdx
         *.spdx.json
+        go.sum
       ].freeze
 
       def self.ignored_dirs