Now that we can authenticate new entries in go.sum,
there is less concern about keeping old ones around
that are not part of the current module graph.
If we update go.mod from v0.1.0 to v0.2.0 of a module
and v0.1.0 is no longer referenced in the build graph,
we should probably drop v0.1.0 from the go.sum.
Not sure about Go 1.13 vs Go 1.14.
Depends on how much work it is.
The text was updated successfully, but these errors were encountered: