it took some time to update but eventually retract worked and v0.2.0 was removed.
now I'm trying to republish it.
if all works ok I'll close this issue

unfortunately, now not only am I not able to update the doc, after trying to retract the packages I cannot push the tag again.
is it possible to just remove my package and I'll publish it again or alternatively fix it somehow?

@nirrozenbaum I think that given how modules proxy/sumdb work, you cannot re-publish the modified module using the exact same version after it already made its way to the sumdb, as at that point it can be already used by someone.

The expected workflow is to publish a new version that retracts the previous broken release. So what you describe here as a bug is an intended behavior.

Please see this blog post, specifically the “Module Retraction” section https://go.dev/blog/go116-module-changes#module-retraction:

[...] To keep module builds deterministic, a version cannot be modified after it is published. Even if you delete or change a version tag, proxy.golang.org and other proxies probably already have the original cached. [...]

It provides more details on the suggested workflow (publishing a new version).

Thanks for the explanation, @artyom!