Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove Go Get Update workflow #813

Merged
merged 1 commit into from
Sep 22, 2023
Merged

Remove Go Get Update workflow #813

merged 1 commit into from
Sep 22, 2023

Conversation

sophiewigmore
Copy link
Member

@sophiewigmore sophiewigmore commented Sep 22, 2023

Summary

Remove the Go Get Update workflow from implementation buildpacks.
Check out this thread in Paketo Slack for conversations around the removal of this workflow.

As of dependabot/dependabot-core#6361, I think that Dependabot can handle transitive dependencies in the go.mod, which wasn't the case when the workflow here was introduced. I think it requires some extra dependabot config

Use Cases

Checklist

  • I have viewed, signed, and submitted the Contributor License Agreement.
  • I have linked issue(s) that this PR should close using keywords or the Github UI (See docs)
  • I have added an integration test, if necessary.
  • I have reviewed the styleguide for guidance on my code quality.
  • I'm happy with the commit history on this PR (I have rebased/squashed as needed).

@robdimsdale
Copy link
Member

It was a little tricky to find example configuration, but I think it looks like the following:

version: 2
updates:
  - package-ecosystem: gomod
    directory: /
    schedule:
      interval: daily
    allow:
      # Allow both direct and indirect updates for all packages
      - dependency-type: "all"

In Dependabot terminology, indirect dependencies are what we are referring to as transitive dependencies.

@robdimsdale robdimsdale merged commit 5158164 into main Sep 22, 2023
4 checks passed
@robdimsdale robdimsdale deleted the remove-go-get-update branch September 22, 2023 19:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants