Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(go): missing Go module v2+ major upgrades #8945

Merged
merged 4 commits into from
Mar 7, 2021

Conversation

56KBs
Copy link
Contributor

@56KBs 56KBs commented Mar 2, 2021

Changes:

Go dependencies may (if v2 or above) contain the version in the dependency URL. When checking for submodules the version should be stripped to ensure that the available versions is correctly filtered based on the submodule name.

e.g

  • github.com/org/mod/v5 should look for all releases named vx.y.z
  • github.com/org/mod/submodule should look for all releases named submodule/vx.y.z
  • github.com/org/mod/submodule/v2 should look for all released name submodule/vx.y.z

Issues #8562 & #8525 are still present following these changes meaning PR/MRs raised won't actually function correctly, but at least alerts will be generated again

Context:

Closes #8937

Documentation (please check one with an [x])

  • I have updated the documentation, or
  • No documentation update is required

How I've tested my work (please tick one)

I have verified these changes via:

  • Code inspection only, or
  • Newly added unit tests, or
  • No new tests but ran on a real repository, or
  • Both unit tests + ran on a real repository

Go dependencies may (if v2 or above) contain the version in the dependency URL. When checking for submodules the version should be stripped to ensure that the available versions is correctly filtered based on the submodule name.

e.g
* github.com/org/mod/v5 should look for all releases named vx.y.z
* github.com/org/mod/submodule should look for all releases named submodule/vx.y.z
* github.com/org/mod/submodule/v2 should look for all released name submodule/vx.y.z
@56KBs 56KBs changed the title fix(go): fix missing Go module v2+ major upgrades fix(go): missing Go module v2+ major upgrades Mar 2, 2021
@56KBs 56KBs marked this pull request as ready for review March 3, 2021 11:07
@rarkins rarkins enabled auto-merge (squash) March 5, 2021 09:42
@rarkins rarkins merged commit ac34124 into renovatebot:master Mar 7, 2021
@renovate-release
Copy link
Collaborator

🎉 This PR is included in version 24.75.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@56KBs 56KBs deleted the fix/go-submodule-detection branch March 8, 2021 09:03
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Apr 8, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Go module v2+ major upgrades unreported
3 participants