Following migration from your account to fogfactory, go fails to update import when working with release v0.1.0 since the go.mod import doesn't point to the right github URL.
For now, I'm using a workaround by importing a specific commit hash from the default branch.
By making a release v0.2.0, I'll be able to use a more "stable" version, get automatic updates from renovate / dependabot and have go get -u ./... finding updates correctly.
I would also recommend, since the repository only changes with dependencies updates to have an auto releasing (to avoid the latest tag to potentially use vulnerable versions).
Following migration from your account to
fogfactory
, go fails to update import when working with releasev0.1.0
since thego.mod
import doesn't point to the right github URL.For now, I'm using a workaround by importing a specific commit hash from the default branch.
By making a release
v0.2.0
, I'll be able to use a more "stable" version, get automatic updates from renovate / dependabot and havego get -u ./...
finding updates correctly.I would also recommend, since the repository only changes with dependencies updates to have an auto releasing (to avoid the latest tag to potentially use vulnerable versions).
Impacted project: https://github.com/kilianpaquier/gitlab-storage-cleaner