Skip to content
This repository was archived by the owner on Sep 7, 2022. It is now read-only.

Bump to go 1.17.0 #12

Merged
merged 2 commits into from
Aug 19, 2021
Merged

Bump to go 1.17.0 #12

merged 2 commits into from
Aug 19, 2021

Conversation

jeffwidman
Copy link
Member

Depends on #11, that should probably be merged first.

This bumps to go 1.17.0 generated via:

$ docker run -v ~/Code/open-source/dependabot/gomodules-extracted:/gomodules -it --rm  golang:1.17.0
root@f5a9ea6a8efe:/go# cd /gomodules/
root@f5a9ea6a8efe:/gomodules# ./script/extract

This bumps to `go` `1.16.7` generated via:
```
$ docker run -v ~/Code/open-source/dependabot/gomodules-extracted:/gomodules -it --rm  golang:1.16.7
root@f5a9ea6a8efe:/go# cd /gomodules/
root@f5a9ea6a8efe:/gomodules# ./script/extract
```
This bumps to `go` `1.17.0` generated via:
```
$ docker run -v ~/Code/open-source/dependabot/gomodules-extracted:/gomodules -it --rm  golang:1.17.0
root@f5a9ea6a8efe:/go# cd /gomodules/
root@f5a9ea6a8efe:/gomodules# ./script/extract
```
// LoadModFile checks the roots of the module graph for consistency with each
// other, but unlike LoadModGraph does not load the full module graph or check
// it for global consistency. Most callers outside of the modload package should
// use LoadModGraph instead.
Copy link
Member Author

@jeffwidman jeffwidman Aug 19, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps dependabot should be updated to use LoadModGraph instead? A question to be solved over in dependabot/dependabot-core#4153.

// other, but unlike LoadModGraph does not load the full module graph or check
// it for global consistency. Most callers outside of the modload package should
// use LoadModGraph instead.
func LoadModFile(ctx context.Context) *Requirements {
Copy link
Member Author

@jeffwidman jeffwidman Aug 19, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The LoadModFile signature changed, so this will be a breaking change for dependabot-core.

Regardless, the fix will have to be made in dependabot-core, not here, as this is effectively a mirror of upstream go code, so we get whatever they give us.

@mctofu mctofu merged commit beea2ae into dependabot:main Aug 19, 2021
@jeffwidman jeffwidman deleted the bump-to-golang-1.17.0 branch August 19, 2021 20:31
mctofu added a commit to dependabot/dependabot-core that referenced this pull request Aug 19, 2021
- Acknowledge we aren't using the return value
- Disable writes to go.mod which is a new go 1.17 behavior

dependabot/gomodules-extracted#12 (comment)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants