golang / go

The Go programming language
https://go.dev
BSD 3-Clause "New" or "Revised" License
123.79k stars 17.64k forks source link

all: update standard-library dependencies at the start and end of each development cycle #36905

Open bcmills opened 4 years ago

bcmills commented 4 years ago

The x dependencies vendored into the standard library (via src/go.mod and src/cmd/go.mod) should be updated for each code freeze, so that we can apply any needed fixes to those dependencies without also pulling in unnecessary changes or requiring significant backporting work (see, for example, #36851).

This task, like #11811, #12042, and the API audit (#36167, #32813), should occur regularly in each development cycle. Probably we should update the dependencies at the beginning of each code freeze, and again when we reopen the tree at the end of each code freeze.

CC @golang/osp-team

gopherbot commented 2 years ago

Change https://golang.org/cl/362734 mentions this issue: all: update vendored golang.org/x/{arch,sys,term} for Go 1.18 release

gopherbot commented 2 years ago

Change https://golang.org/cl/362736 mentions this issue: all: update vendored golang.org/x/crypto for Go 1.18 release

gopherbot commented 2 years ago

Change https://golang.org/cl/362735 mentions this issue: all: update vendored golang.org/x/{net,text} for Go 1.18 release

dmitshur commented 2 years ago

CL 361294 updated github.com/google/pprof. CLs 362734, 362735, 362736, and 361094 updated all golang.org/x dependencies other than x/mod. That is all that's left for the purpose of this issue (other individual updates may also happen, as long as they're bringing in things in scope for the 1.18 freeze).

dmitshur commented 2 years ago

CL 364114 took care of x/mod, the remaining bit for this issue.

Moving to 1.19 early in cycle.

gopherbot commented 2 years ago

This issue is currently labeled as early-in-cycle for Go 1.19. That time is now, so a friendly reminder to look at it again.

gopherbot commented 2 years ago

Change https://go.dev/cl/393370 mentions this issue: cmd: update vendored pprof

gopherbot commented 2 years ago

Change https://go.dev/cl/393373 mentions this issue: all: update vendored golang.org/x/tools

gopherbot commented 2 years ago

Change https://go.dev/cl/393674 mentions this issue: cmd/updatestd: ignore _ directories

gopherbot commented 2 years ago

Change https://go.dev/cl/393369 mentions this issue: all: update vendored x dependencies for Go 1.19 development cycle

gopherbot commented 2 years ago

Change https://go.dev/cl/406355 mentions this issue: all: update vendored golang.org/x/{arch,sys,term} for Go 1.19 release

gopherbot commented 2 years ago

Change https://go.dev/cl/406356 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.19 release

gopherbot commented 2 years ago

Change https://go.dev/cl/406359 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

dmitshur commented 2 years ago

CL 406355 and CL 406356 updated golang.org/x dependencies. CL 406359 updated github.com/google/pprof. (Other individual updates may also happen, as long as they're bringing in things in scope for the 1.19 freeze, e.g., to fix release-blocking issues, but that's outside of scope if this issue.)

Moving to 1.20 early in cycle.

gopherbot commented 2 years ago

Change https://go.dev/cl/421334 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.20 development

gopherbot commented 2 years ago

Change https://go.dev/cl/421461 mentions this issue: all: update vendored golang.org/x/{net,tools} for Go 1.20 development

dmitshur commented 2 years ago

CLs 421334 and 421461 took care of all the golang.org/x dependencies, and CL 420234 will update pprof. Once that's done, we can remove the early-in-cycle label and revisit this closer to the freeze.

gopherbot commented 1 year ago

Change https://go.dev/cl/452766 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.20 release

gopherbot commented 1 year ago

Change https://go.dev/cl/452815 mentions this issue: cmd/vendor: update vendored github.com/google/pprof for Go 1.20 release

cherrymui commented 1 year ago

The two CLs above did it for 1.20. Move it to 1.21 early in cycle.

gopherbot commented 1 year ago

Change https://go.dev/cl/462199 mentions this issue: src: update go.mod files to go 1.21

gopherbot commented 1 year ago

This issue is currently labeled as early-in-cycle for Go 1.21. That time is now, so a friendly reminder to look at it again.

dmitshur commented 1 year ago

CL 467297 and a few others took care of this for early in cycle. Removing that label to revisit this at the start of freeze.

gopherbot commented 1 year ago

Change https://go.dev/cl/498598 mentions this issue: all: update vendored dependencies

gopherbot commented 1 year ago

Change https://go.dev/cl/502878 mentions this issue: all: update vendored dependencies

gopherbot commented 1 year ago

Change https://go.dev/cl/509099 mentions this issue: all: update vendored dependencies

gopherbot commented 1 year ago

This issue is currently labeled as early-in-cycle for Go 1.22. That time is now, so a friendly reminder to look at it again.

gopherbot commented 1 year ago

Change https://go.dev/cl/517875 mentions this issue: all: update vendored dependencies

gopherbot commented 1 year ago

Change https://go.dev/cl/519657 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

gopherbot commented 1 year ago

Change https://go.dev/cl/536575 mentions this issue: all: update vendored dependencies

gopherbot commented 11 months ago

Change https://go.dev/cl/546055 mentions this issue: all: update vendored dependencies

dmitshur commented 11 months ago

CL 546055 did the start-of-freeze update for the 1.22 cycle. Moving to the Go 1.23 milestone and adding early-in-cycle.

gopherbot commented 9 months ago

This issue is currently labeled as early-in-cycle for Go 1.23. That time is now, so a friendly reminder to look at it again.

gopherbot commented 9 months ago

Change https://go.dev/cl/557457 mentions this issue: all: update vendored dependencies

cherrymui commented 9 months ago

CL https://go.dev/cl/557457 submitted for Go 1.23 early-in-cycle. Removed the early-in-cycle label, leave the issue for Go 1.23 end-of-cycle.

gopherbot commented 8 months ago

Change https://go.dev/cl/564636 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

gopherbot commented 4 months ago

Change https://go.dev/cl/589935 mentions this issue: all: update vendored dependencies

mknyszek commented 4 months ago

CL 589935 did the start-of-freeze update for the 1.23 cycle. Moving to the Go 1.24 milestone and adding early-in-cycle.

gopherbot commented 3 months ago

This issue is currently labeled as early-in-cycle for Go 1.24. That time is now, so a friendly reminder to look at it again.

gopherbot commented 3 months ago

Change https://go.dev/cl/600535 mentions this issue: all: update vendored dependencies

gopherbot commented 3 months ago

Change https://go.dev/cl/600596 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

dmitshur commented 3 months ago

CL 600535 did the early-in-cycle update for Go 1.24. (Also sent CL 600596 to update a pprof dependency.) Removing that label to revisit this when the freeze starts.