Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stop bumping go directive unless necessitated by other dependencies #345

Open
kaovilai opened this issue Dec 24, 2024 · 1 comment
Open

Comments

@kaovilai
Copy link

This repo by itself should not be enforcing minimum on other repositories importing it. Stop spreading "minimum virus"

toolchain version used will be defined outside of go.mod ideally, such as by installing a newer compatible go toolchain to ci/cd/development env.

Failing that, toolchain directive should be used instead of go directive for bumping versions to not cascade minimum versions to importing dependencies.

toolchain directive, in contrast to the go directive, applies only to the current module (the one defined by the go.mod file). It suggests the toolchain to be used when in that very module, and doesn't propagate to other modules.

High profile repos that have removed/reduced minimum go patch version per user requests

Being proactive to prevent following from reoccuring

@kaovilai
Copy link
Author

@kaovilai ➜ /workspaces/go-grpc-kit (main) $ go mod graph | grep go@1.23
chainguard.dev/go-grpc-kit go@1.23.1
go@1.23.1 toolchain@go1.23.1
@kaovilai ➜ /workspaces/go-grpc-kit (main) $ go mod graph | grep go@1.22
github.com/chainguard-dev/clog@v1.5.1 go@1.22.4
github.com/grpc-ecosystem/grpc-gateway/v2@v2.24.0 go@1.22.7
go.opentelemetry.io/auto/sdk@v1.1.0 go@1.22.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.58.0 go@1.22.7
go.opentelemetry.io/otel@v1.33.0 go@1.22.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go@1.22.7
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0 go@1.22.7
go.opentelemetry.io/otel/metric@v1.33.0 go@1.22.0
go.opentelemetry.io/otel/sdk@v1.33.0 go@1.22.0
go.opentelemetry.io/otel/trace@v1.33.0 go@1.22.0
go.opentelemetry.io/proto/otlp@v1.4.0 go@1.22.7
google.golang.org/grpc@v1.69.0 go@1.22

Nothing in this repo necessitated 1.23.1. In fact, it is shown that the lowest required by other deps is 1.22.7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant