Skip to content

Relax gomod#1909

Merged
bobcallaway merged 3 commits intosigstore:mainfrom
cpanato:relax-gomod
Jan 15, 2025
Merged

Relax gomod#1909
bobcallaway merged 3 commits intosigstore:mainfrom
cpanato:relax-gomod

Conversation

@cpanato
Copy link
Copy Markdown
Member

@cpanato cpanato commented Jan 15, 2025

Summary

Similar work done in sigstore/rekor#2323

Fixes: #1899

Signed-off-by: cpanato <ctadeu@gmail.com>
Signed-off-by: cpanato <ctadeu@gmail.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented Jan 15, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 49.09%. Comparing base (cf238ac) to head (85d35aa).
Report is 273 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1909      +/-   ##
==========================================
- Coverage   57.93%   49.09%   -8.84%     
==========================================
  Files          50       70      +20     
  Lines        3119     5204    +2085     
==========================================
+ Hits         1807     2555     +748     
- Misses       1154     2415    +1261     
- Partials      158      234      +76     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Signed-off-by: cpanato <ctadeu@gmail.com>
Comment thread go.mod
module github.com/sigstore/fulcio

go 1.23.4
go 1.23.3
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we may have to do this again after sigstore/sigstore requirements get dropped and we cut a release?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think so

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just checked sigstore/sigstore, the version we're using here is on 1.22. @cpanato do you know what's causing the higher requirement?

@bobcallaway bobcallaway merged commit 2affb2f into sigstore:main Jan 15, 2025
@cpanato cpanato deleted the relax-gomod branch January 15, 2025 13:20
@Hayden-IO
Copy link
Copy Markdown
Contributor

@cpanato I think I found the culprits, https://github.com/chainguard-dev/go-grpc-kit/blob/main/go.mod and https://github.com/chainguard-dev/sdk/blob/main/go.mod. Can these be lowered to 1.22.0?

@cpanato
Copy link
Copy Markdown
Member Author

cpanato commented Jan 17, 2025

not sure to be honest, but can check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Stop bumping go directive unless necessitated by other dependencies

3 participants