Following the plan that I explained here:

• create a fork inside the golangci org
• apply the fix
• use the fork as a dependency (I will create a dedicated module to avoid replace directives, because replace directives are not transitive, so users that are using that use the tools pattern will not have a problem.)

Summary of issue #3862:
depguard uses build.Default.GOROOT but this value is filled correctly only if the GOROOT is defined through an env var.

$ go env | grep GOROOT
GOROOT="/usr/local/go"

$ env | grep GOROOT

$ export GOROOT=/usr/local/go

$ env | grep GOROOT
GOROOT=/usr/local/go

The "expander" cannot be overridden because it's a global variable inside an internal package, the compile method that produces the error and the analyzer constructor are not exported.

The fix I have done in our depguard fork is based on what is done inside golang.org/x/tools.

golangci/depguard@v2.0.1...ed68d37

When the PR OpenPeeDeeP/depguard#48 will be merged and when depguard will create a new release, we will drop this dependency (but we will have to keep the fork for compatibility.)

Fixes #3862