12 Commits
Author SHA1 Message Date
Davanum Srinivas 50248ff92d dependencyverifier: record indirect-only unwanted modules
The nil check inside the referencer loop tested the map that the code
above had just created, so it never ran. An unwanted module whose only
referencers are main modules listing it as an indirect dependency got no
status.unwantedReferences key at all; google/btree, reached through the
go.mod-less peterbourgon/diskv v2, was invisible this way until diskv
v3.0.1 gave it a visible referencer.

Check for the key instead, so the next module in that situation shows up
as an empty entry.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-09-28 11:53:21 -04:00
Davanum Srinivas c509e22d11 Add a list of modules that should be pinned at current versions
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-05-20 18:05:57 -04:00
Davanum Srinivas 4e05bc20db Linter to ensure go-cmp/cmp is used ONLY in tests
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-01-24 20:49:14 -05:00
Oscar Guertler 5543143027 chore: rm ioutil from cmd 2024-08-31 20:26:13 +02:00
Jordan Liggitt 9f76d8d45a Track vendor status of unwanted deps 2023-09-06 21:48:30 -04:00
Jordan Liggitt a5fff9a5d0 Catch direct references to unwanted dependencies in kubernetes modules 2023-08-02 15:44:25 -04:00
Paco Xu f44029705f exit 1 if status are not as expected(order)
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-06-18 14:09:50 +08:00
Jordan Liggitt f488c67eb5 Fix unwanted dependencies scanner 2022-10-28 15:15:20 -04:00
ahrtr 972dc46a1f replace deprecated io/ioutil with os and io for cmd 2022-02-01 13:59:41 +08:00
Davanum Srinivas 9405e9b55e Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
pacoxu b99e1e4aa9 use reference as we cannot distinguishing direct/indirect with go mod graph 2021-09-20 22:14:34 +08:00
pacoxuandJordan Liggitt 22ccb37e88 add update-unwanted-dependencies.sh to track unwanted dependencies
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-09-17 13:21:38 +08:00