fix: fix oci sum missing

Signed-off-by: zongz <[email protected]>

pkg/client/client.go

@@ -996,8 +996,9 @@ func (c *KpmClient) Download(dep *pkg.Dependency, homePath, localPath string) (*
 			// The invalid path such as '$HOME/.kcl/kpm/k8s_' is placed because the version field is missing.
 			dep.Version = latestTag
 			dep.FullName = dep.GenDepFullName()
-			dep.LocalFullPath = filepath.Join(filepath.Dir(localPath), dep.FullName)
+			dep.LocalFullPath = c.getDepStorePath(homePath, dep, false)
 			localPath = dep.LocalFullPath
+
 			if utils.DirExists(dep.LocalFullPath) {
 				dpkg, err := c.LoadPkgFromPath(localPath)
 				if err != nil {
@@ -1525,6 +1526,8 @@ func (c *KpmClient) DownloadDeps(deps *pkg.Dependencies, lockDeps *pkg.Dependenc
 					errors.CheckSumMismatchError,
 					fmt.Sprintf("checksum for '%s' changed in lock file '%s' and '%s'", lockedDep.Name, expectedSum, lockedDep.Sum),
 				)
+			} else {
+				lockedDep.Sum = lockDeps.Deps[d.Name].Sum
 			}
 		}