search

chainguard-dev / gobump

Go tool to declaratively bump dependencies.
Apache License 2.0
7 stars 11 forks source link

replaces: don't error when setting an older version #22

Closed hectorj2f closed 6 months ago

hectorj2f commented 9 months ago

If we change to warnings instead of errors we could deal with certain projects where older dependencies are required. The current behaviour throws an error when setting in the replaces a dependency that uses an older version than one in the go.mod. However this error doesn't take into account if we really need this old dep to build the project. Or even if go mod tidy did bumped this version for us.

hectorj2f commented 6 months ago

I changed my opinion about this issue, I'm closing it. We should do this.