Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update pillar dependency in edgeview and newlog #2884

Merged
merged 1 commit into from
Oct 25, 2022

Conversation

milan-zededa
Copy link
Contributor

The main purpose of this PR is to update the indirect dependency on Focinfi/go-dns-resolver package. The previous version of this package was missing license. Also, github.com/rackn/gohai disappeared from go.sum as expected.

Also run go mod tidy for both packages and go mod vendor additionally for newlog
edgeview does not use vendoring - @naiming-zededa do we want to keep it like that or unify it with pillar and newlog? I believe vendoring is used only to shorten the container build time.

Signed-off-by: Milan Lenco milan@zededa.com

The main purpose of this PR is to update the indirect dependency on
Focinfi/go-dns-resolver package. The previous version of this package
was missing license.

Also run 'go mod tidy' for both packages and 'go mod vendor'
additionally for newlog (edgeview does not use vendoring).

Signed-off-by: Milan Lenco <milan@zededa.com>
Copy link
Contributor

@eriknordmark eriknordmark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

@eriknordmark eriknordmark merged commit 0aad7d6 into lf-edge:master Oct 25, 2022
@naiming-zededa
Copy link
Contributor

@milan-zededa I think the current way is fine. when update for edgeview is needed from pillar, it can update the go.mod instead of copying all the vendor files. thanks.

@eriknordmark
Copy link
Contributor

@milan-zededa I think the current way is fine. when update for edgeview is needed from pillar, it can update the go.mod instead of copying all the vendor files. thanks.
@naiming-zededa @milan-zededa
FYI in #2861 we are trying to run the build without network access as a way of being able to better track which packages (golang, alpine, etc) so that it is easier to track the Software Bill of Materials for a build/release.
That implies that each pkg/foo needs to be more self contained. Hence having a vendor directory with the needed source (which go mod vendor will create). So I think we need such a PR for edgeview.

@naiming-zededa
Copy link
Contributor

ok.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants