Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[gomod] Support updating indirect dependencies #6361

Merged
merged 5 commits into from
Jan 4, 2023
Merged

[gomod] Support updating indirect dependencies #6361

merged 5 commits into from
Jan 4, 2023

Commits on Jan 4, 2023

  1. Parse indirect deps from go.mod

    @mctofu
    mctofu committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    3f5c170 View commit details
    Browse the repository at this point in the history

  2. lint reformatting

    @mctofu
    mctofu committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    13636e8 View commit details
    Browse the repository at this point in the history

  3. Prevent double fetching versions during a security update

    @mctofu
    mctofu committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    229c92c View commit details
    Browse the repository at this point in the history

  4. Support security updates for indirect deps

    @mctofu
    mctofu committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    e3ce198 View commit details
    Browse the repository at this point in the history

  5. Skip parsing replaced dependencies 

    We previously prevented updating replaced dependencies by treating them
as indirect dependencies which we didn't support updating. Now that
indirect updates are supported we still don't want to update replaced
dependencies till we can properly support them.
    @mctofu
    mctofu committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    cddd02a View commit details
    Browse the repository at this point in the history