36 Commits

Author SHA1 Message Date
Sjoerd Simons
4f6c82a5a0 Switch yaml parsing to goccy/go-yaml
go-yaml/yaml has been deprecated by its maintainer; Move to goccy/go-yaml, which is
an actively maintained from a scratch yaml implementation in pure go. It
should able to parse all yaml file go-yaml could, and more. As an extra
benefit its errors are a lot better.

Fixes: #592
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2025-11-01 22:04:02 +01:00
dependabot[bot]
727ae70554 build(deps): bump github.com/go-debos/fakemachine from 0.0.11 to 0.0.12
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.11 to 0.0.12.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.11...v0.0.12)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-version: 0.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-29 03:03:53 +00:00
dependabot[bot]
10eabbf8c1 build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14
Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.12 to 0.5.14.
- [Commits](https://github.com/ulikunitz/xz/compare/v0.5.12...v0.5.14)

---
updated-dependencies:
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.14
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-01 09:08:04 +00:00
dependabot[bot]
2d3bd4437c build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.11.0 to 1.11.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.11.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-28 07:49:27 +00:00
dependabot[bot]
894b1318db build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-25 05:10:35 +00:00
Christopher Obbard
a34a66f399 Merge pull request #546 from go-debos/dependabot/go_modules/al.essio.dev/pkg/shellescape-1.6.0
build(deps): bump al.essio.dev/pkg/shellescape from 1.5.1 to 1.6.0
2025-06-05 21:14:32 +00:00
dependabot[bot]
5fd82761a5 build(deps): bump al.essio.dev/pkg/shellescape from 1.5.1 to 1.6.0
Bumps [al.essio.dev/pkg/shellescape](https://github.com/alessio/shellescape) from 1.5.1 to 1.6.0.
- [Release notes](https://github.com/alessio/shellescape/releases)
- [Changelog](https://github.com/alessio/shellescape/blob/master/.goreleaser.yml)
- [Commits](https://github.com/alessio/shellescape/compare/v1.5.1...v1.6.0)

---
updated-dependencies:
- dependency-name: al.essio.dev/pkg/shellescape
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-10 03:41:09 +00:00
dependabot[bot]
6e8498c69c build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-04 11:15:58 +00:00
Sjoerd Simons
ba4449b7b4 Merge pull request #536 from julien-massot/main
Add support for alternate sector size
2025-03-04 10:38:37 +00:00
Julien Massot
b857fe8416 Update to fakemachine 0.0.11
The new fakemachine supports sector size setting.

Signed-off-by: Julien Massot <julien.massot@collabora.com>
2025-03-04 07:16:15 +01:00
Sjoerd Simons
3e0f842ca5 Adjust shellescape go module path
The shellescape module renamed itself to al.essio.dev/pkg/shellescape.
Adjust imports to match
2025-03-04 07:14:49 +01:00
liberodark
ad729b7472 Bump to Go 1.23 2025-02-16 10:42:43 +01:00
Jakob Unterwurzacher
958e68dbe6 deps: bump go-losetup to latest v2 release
We were stuck in 2017 (v1.0.0-20170407175016-fc9adea44124).

Related: https://github.com/go-debos/debos/issues/522
2024-11-19 16:56:35 +01:00
dependabot[bot]
21646808e0 build(deps): bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1
Bumps [github.com/jessevdk/go-flags](https://github.com/jessevdk/go-flags) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/jessevdk/go-flags/releases)
- [Commits](https://github.com/jessevdk/go-flags/compare/v1.5.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/jessevdk/go-flags
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 03:54:16 +00:00
dependabot[bot]
baf33bd093 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 03:37:53 +00:00
dependabot[bot]
c0f2c2e8cb build(deps): bump github.com/go-debos/fakemachine from 0.0.9 to 0.0.10
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.9...v0.0.10)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-27 03:22:52 +00:00
dependabot[bot]
ead0791fa8 build(deps): bump github.com/google/uuid from 1.4.0 to 1.6.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.4.0 to 1.6.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-24 03:47:13 +00:00
dependabot[bot]
f3587ae380 build(deps): bump github.com/go-debos/fakemachine from 0.0.8 to 0.0.9
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.8...v0.0.9)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 06:37:21 +00:00
Christopher Obbard
72978854f7 Add slim-sprig functions to template language
slim-sprig is a lightweight library containing a number of useful helper
functions which are useful to use in go templates. Include it in debos
so we can use the functions in recipes.

Signed-off-by: Christopher Obbard <chris.obbard@collabora.com>
2023-12-30 22:26:48 +00:00
Sjoerd Simons
7969a64070 Bump fakemachine to 0.0.8
Move to fakemachine 0.0.8. This requires dropping the test builds on
bullseeye as it bumps the minimal golang requirement.

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>
2023-12-30 16:08:04 +00:00
Sjoerd Simons
1954affd5f Update to fakemachine 0.0.7
Newer fakemachines adds shell escaping to the arguments passed into it.
Which means that the minimal escaping (by quoting) in debos ends up
actually adding quotes to the arguments as it gets escaped

Fixes #141

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>
2023-11-11 09:53:47 +00:00
dependabot[bot]
eab775956e build(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-02 12:56:35 +00:00
dependabot[bot]
9857a4d40a build(deps): bump github.com/go-debos/fakemachine from 0.0.5 to 0.0.6
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.5 to 0.0.6.
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.5...v0.0.6)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-27 06:35:35 +00:00
dependabot[bot]
38afff7b40 build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.0...v1.3.1)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-22 09:08:07 +00:00
dependabot[bot]
1ea5f887c8 build(deps): bump github.com/go-debos/fakemachine from 0.0.4 to 0.0.5
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.4 to 0.0.5.
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.4...v0.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-25 10:05:38 +00:00
dependabot[bot]
f6a4cb4e40 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-27 04:15:14 +00:00
dependabot[bot]
540a872d1a build(deps): bump github.com/go-debos/fakemachine from 0.0.3 to 0.0.4
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.3 to 0.0.4.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.3...v0.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-09 03:04:36 +00:00
dependabot[bot]
5421d51ac6 build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-24 03:30:59 +00:00
dependabot[bot]
5e156df043 build(deps): bump github.com/go-debos/fakemachine from 0.0.2 to 0.0.3
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.2 to 0.0.3.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.2...v0.0.3)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-13 03:24:56 +00:00
bors[bot]
b6c41ca146 Merge #334 #352 #360
334: image_partition_action: Add support for FS extended options r=obbardc a=cazou

Extended options can be used for specific file system tuning.

352: build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 r=obbardc a=dependabot[bot]

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="181cea6eab"><code>181cea6</code></a> impr: <code>CallerInfo</code> should print full paths to the terminal (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1201">#1201</a>)</li>
<li><a href="cf1284f8dd"><code>cf1284f</code></a> Allow mock expectations to be ordered (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1106">#1106</a>)</li>
<li><a href="66eef0ef3a"><code>66eef0e</code></a> fix: assert.MapSubset (or just support maps in assert.Subset) (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1178">#1178</a>)</li>
<li><a href="2fab6dffcf"><code>2fab6df</code></a> Add WithinTimeRange method (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1188">#1188</a>)</li>
<li>See full diff in <a href="https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.7.5&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

360: build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 r=obbardc a=dependabot[bot]

Bumps [github.com/docker/go-units](https://github.com/docker/go-units) from 0.4.0 to 0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="e682442797"><code>e682442</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/go-units/issues/40">#40</a> from kolyshkin/no-regex</li>
<li><a href="737572633c"><code>7375726</code></a> size: stop using regexp</li>
<li><a href="cec49607f7"><code>cec4960</code></a> size_test: add more tests</li>
<li><a href="54c3e55954"><code>54c3e55</code></a> size_test: add t.Helper annotations</li>
<li><a href="1d23ffa157"><code>1d23ffa</code></a> size_test: add parseSize benchmark</li>
<li><a href="af07f36391"><code>af07f36</code></a> size_test: add tests for 0.3 + suffix</li>
<li>See full diff in <a href="https://github.com/docker/go-units/compare/v0.4.0...v0.5.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/go-units&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: Detlev Casanova <detlev.casanova@collabora.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-12 18:58:03 +00:00
dependabot[bot]
6e66c0e3f7 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
Bumps [github.com/docker/go-units](https://github.com/docker/go-units) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/docker/go-units/releases)
- [Commits](https://github.com/docker/go-units/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/docker/go-units
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-01 03:27:51 +00:00
dependabot[bot]
1c6ebfcf18 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-30 03:39:40 +00:00
dependabot[bot]
a8a4fa4365 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.5
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.1 to 1.7.5.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.1...v1.7.5)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-24 03:29:29 +00:00
dependabot[bot]
b8d835e15e build(deps): bump github.com/go-debos/fakemachine from 0.0.1 to 0.0.2
Bumps [github.com/go-debos/fakemachine](https://github.com/go-debos/fakemachine) from 0.0.1 to 0.0.2.
- [Release notes](https://github.com/go-debos/fakemachine/releases)
- [Commits](https://github.com/go-debos/fakemachine/compare/v0.0.1...v0.0.2)

---
updated-dependencies:
- dependency-name: github.com/go-debos/fakemachine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-27 20:34:54 +02:00
Christopher Obbard
5ed7f502f2 Update go.mod for new fakemachine tag
Signed-off-by: Christopher Obbard <chris.obbard@collabora.com>
2022-04-22 16:09:46 +01:00
Christopher Obbard
9751ecd960 Use go modules
During go versions 1.11-1.16 the go system has gone through a notable
shift of how it handles modules/dependencies.

The original approach was to always pull the master branch. With 1.11
things have moved to implicitly use the latest symver tag and version
1.16 prefers that dependencies are a) described in a go.mod file and b)
vendored in-tree.

Note: go 1.16 does support externally stored dependencies, although in
that case a go.sum file must also be provided, which includes relevant
checksums.

The new approach is beneficial to both project and people building it.

The project can use, specific revision which works correctly - think
missing API, specific bugs, etc.

While the builders no longer need to track all the dependencies,
recursively, themselves and fetch them via `go get`. A simple `go build`
does everything needed.

This commit was generated via:

1. go mod init github.com/go-debos/debos
2. go mod tidy

See the following URL for more details.

https://blog.golang.org/using-go-modules
https://golang.org/ref/mod
24f4a3003b

The commit text was based off work by Emil Velikov <emil.velikov@collabora.com>
so big thanks to Emil!

Signed-off-by: Christopher Obbard <chris.obbard@collabora.com>
2022-04-14 21:14:27 +02:00