Skip to content
This repository has been archived by the owner on Sep 9, 2020. It is now read-only.

Vendor verification #1912

Merged
merged 26 commits into from
Jul 11, 2018
Merged

Vendor verification #1912

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
c7e220d
Remove InputsDigest, add InputImports
sdboyer Jun 14, 2018
db8b66b
dep: Introduce lock verification logic
sdboyer Jun 15, 2018
f23ef51
gps: Convert LockedProject to an interface
sdboyer Jun 21, 2018
81b3a3d
gps: Introduce verify subpackage
sdboyer Jun 25, 2018
485c74e
dep: Add foundation for verified, pruned vendor
sdboyer Jun 25, 2018
4cb57f5
dep: Make DeltaWriter use temp sibling vendor dir
sdboyer Jun 26, 2018
bce4a36
gps: Remove all reference to InputsDigest
sdboyer Jun 26, 2018
0b2482d
verify: Relocate lock diffing and tree hashing
sdboyer Jun 26, 2018
df2c26b
dep: Get DeltaWriter into a working state
sdboyer Jun 28, 2018
13ec211
gps: Diff->Delta, and bitfield for change checking
sdboyer Jun 28, 2018
6b47f58
dep: Tell the user why we're solving
sdboyer Jul 1, 2018
f00e828
dep: Update scads of tests
sdboyer Jul 3, 2018
9d4eca8
gps: Collapse LockWithImports into Lock
sdboyer Jul 4, 2018
3c60abc
dep: Make DeltaWriter sensitive to -vendor-only
sdboyer Jul 4, 2018
08a4349
dep: Fix linting issues, update CHANGELOG
sdboyer Jul 4, 2018
812b8c1
dep: Linting fixes
sdboyer Jul 4, 2018
d22fbb8
dep: Implement DeltaWriter.PrintPreparedActions()
sdboyer Jul 7, 2018
4b02ee0
dep: Use DeltaWriter on -no-vendor path, as well
sdboyer Jul 8, 2018
80eeec7
gps/verify: Add tests for LockSatisfaction
sdboyer Jul 9, 2018
0db8f69
gps/verify: Add LockDiff unit tests
sdboyer Jul 9, 2018
69991c7
dep: Fix -vendor-only path's invocation ordering
sdboyer Jul 9, 2018
5c8a1e3
Merge branch 'master' into verify-vendor
sdboyer Jul 9, 2018
d7a412f
dep: Update docs to reflect vendor verification
sdboyer Jul 9, 2018
fe299f7
dep: Switch back to SafeWriter for -vendor-only
sdboyer Jul 9, 2018
a34a48d
dep: Encapsulate vendor verification into method
sdboyer Jul 10, 2018
fc9484a
Add missing license header
sdboyer Jul 10, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,16 @@
# (next version)

# v0.5.0

NEW FEATURES:

* Add CI tests against go1.10. Drop support for go1.8. ([#1620](https://github.com/golang/dep/pull/1620)).
* Added `install.sh` script. ([#1533](https://github.com/golang/dep/pull/1533)).
* List out of date projects in dep status ([#1553](https://github.com/golang/dep/pull/1553)).
* Enabled opt-in persistent caching via `DEPCACHEAGE` env var. ([#1711](https://github.com/golang/dep/pull/1711)).
* Allow `DEPPROJECTROOT` [environment variable](https://golang.github.io/dep/docs/env-vars.html#depprojectroot) to supersede GOPATH deduction and explicitly set the current project's [root](https://golang.github.io/dep/docs/glossary.html#project-root) ([#1883](https://github.com/golang/dep/pull/1883)).
* `dep ensure` now explains what changes to the code or Gopkg.toml have induced solving ([#1912](https://github.com/golang/dep/pull/1912)).
* Hash digests of vendor contents are now stored in `Gopkg.lock`, and the contents of vendor are only rewritten on change or hash mismatch ([#1912](https://github.com/golang/dep/pull/1912)).

BUG FIXES:

Expand All @@ -17,6 +21,7 @@ IMPROVEMENTS:
* Add template operations support in dep status template output ([#1549](https://github.com/golang/dep/pull/1549)).
* Reduce network access by trusting local source information and only pulling from upstream when necessary ([#1250](https://github.com/golang/dep/pull/1250)).
* Update our dependency on Masterminds/semver to follow upstream again now that [Masterminds/semver#67](https://github.com/Masterminds/semver/pull/67) is merged([#1792](https://github.com/golang/dep/pull/1792)).
* `inputs-digest` was removed from `Gopkg.lock` ([#1912](https://github.com/golang/dep/pull/1912)).
* Don't exclude `Godeps` folder ([#1822](https://github.com/golang/dep/issues/1822)).

WIP:
Expand Down
43 changes: 42 additions & 1 deletion Gopkg.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading