Use github.com/golang/dep for dependency management

We'll use dep init to pick appropriate versions, this means many
of the dependencies will switch from master to the latest stable
commit according to semver.

We're not committing the vendor folder just yet due to its very
large size (152MB), I would like to in the future after reducing
the size, or once GopherCI development stabilises more.

.gitignore

@@ -1,2 +1,3 @@
 /*.pem
+/vendor/
 .env

.travis.yml

@@ -13,6 +13,7 @@ before_install:
     - docker pull gopherci/gopherci-env:latest
     - go get github.com/mattn/goveralls
     - go get golang.org/x/tools/cmd/cover
+    - go get github.com/golang/dep/cmd/dep
     - make deps
 script:
     - $HOME/gopath/bin/goveralls -service=travis-ci

Gopkg.toml

@@ -0,0 +1,94 @@
+
+# Gopkg.toml example
+#
+# Refer to https://github.com/golang/dep/blob/master/docs/Gopkg.toml.md
+# for detailed Gopkg.toml documentation.
+#
+# required = ["github.com/user/thing/cmd/thing"]
+# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
+#
+# [[constraint]]
+#   name = "github.com/user/project"
+#   version = "1.0.0"
+#
+# [[constraint]]
+#   name = "github.com/user/project2"
+#   branch = "dev"
+#   source = "github.com/myfork/project2"
+#
+# [[override]]
+#  name = "github.com/x/y"
+#  version = "2.4.0"
+
+
+[[constraint]]
+  name = "cloud.google.com/go"
+  version = "0.10.0"
+
+[[constraint]]
+  name = "github.com/bradleyfalzon/ghinstallation"
+  version = "0.1.0"
+
+[[constraint]]
+  name = "github.com/bradleyfalzon/revgrep"
+  version = "0.2.0"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/fsouza/go-dockerclient"
+
+[[constraint]]
+  name = "github.com/go-chi/chi"
+  version = "3.1.3"
+
+[[constraint]]
+  name = "github.com/go-sql-driver/mysql"
+  version = "1.3.0"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/google/go-github"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/jmoiron/sqlx"
+
+[[constraint]]
+  name = "github.com/joho/godotenv"
+  version = "1.1.0"
+
+[[constraint]]
+  name = "github.com/pkg/errors"
+  version = "0.8.0"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/rubenv/sql-migrate"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/sethgrid/pester"
+
+[[constraint]]
+  branch = "master"
+  name = "golang.org/x/net"
+
+[[constraint]]
+  branch = "master"
+  name = "golang.org/x/oauth2"
+
+[[constraint]]
+  branch = "master"
+  name = "golang.org/x/sys"
+
+[[constraint]]
+  name = "google.golang.org/grpc"
+  version = "1.5.0"
+
+[[constraint]]
+  branch = "v1"
+  name = "gopkg.in/yaml.v1"
+
+[[constraint]]
+  branch = "master"
+  name = "sourcegraph.com/sourcegraph/go-diff"

Makefile

@@ -1,5 +1,5 @@
 deps:
-	go get -u -t -v ./...
+	dep ensure
 
 install:
 	go install