search

anacrolix / torrent

Full-featured BitTorrent client package and utilities
Mozilla Public License 2.0
5.51k stars 622 forks source link

Latest release (1.57.1) has an incompatibility with the dht package #984

Open decentralgabe opened 2 hours ago

decentralgabe commented 2 hours ago

after running

govulncheck ./...

in my project I see:

error: package "github.com/anacrolix/torrent/metainfo" without types was imported from "github.com/anacrolix/dht/v2/krpc"

Using versions:

decentralgabe commented 2 hours ago

The fix is to update https://github.com/anacrolix/dht/blob/master/go.mod#L21 to use v1.57.1 or this https://github.com/anacrolix/torrent/blob/master/go.mod#L11 to use v2.22.0

or perhaps to remove dependencies in both directions between the projects