as we learned today, "replace" directives are not reported by things like go mod graph, and are only reported by go list if you ask for the ".Replace" directive, since "replace" only replaces the source code of the replaced version and not the actual version reported as used by go.
this adds support for the "Replace" field in go-resolved-dependencies.json files such that we can replace the deps during Bibliothecary analysis of those files, as we did in #585 with go.mod files.
(followup to https://github.com/librariesio/bibliothecary/pull/585)
as we learned today,
"replace"
directives are not reported by things likego mod graph
, and are only reported bygo list
if you ask for the ".Replace" directive, since"replace"
only replaces the source code of the replaced version and not the actual version reported as used by go.this adds support for the "Replace" field in
go-resolved-dependencies.json
files such that we can replace the deps during Bibliothecary analysis of those files, as we did in #585 withgo.mod
files.