librariesio / bibliothecary

:notebook_with_decorative_cover: Libraries.io Package Manager Manifest Parsers
https://libraries.io/rubygems/bibliothecary
GNU Affero General Public License v3.0
89 stars 36 forks source link

8.7.6: go-resolved-dependencies.json: adds official support for "replace" directive #588

Closed tiegz closed 8 months ago

tiegz commented 8 months ago

(followup to https://github.com/librariesio/bibliothecary/pull/585)

as we learned today, "replace" directives are not reported by things like go mod graph, and are only reported by go list if you ask for the ".Replace" directive, since "replace" only replaces the source code of the replaced version and not the actual version reported as used by go.

this adds support for the "Replace" field in go-resolved-dependencies.json files such that we can replace the deps during Bibliothecary analysis of those files, as we did in #585 with go.mod files.