-
Notifications
You must be signed in to change notification settings - Fork 265
chore: stop vendoring #6951
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
chore: stop vendoring #6951
Conversation
Jenkins BuildsClick to see older builds (120)
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## develop #6951 +/- ##
===========================================
+ Coverage 59.58% 59.63% +0.04%
===========================================
Files 801 801
Lines 113885 113885
===========================================
+ Hits 67864 67914 +50
+ Misses 39085 39053 -32
+ Partials 6936 6918 -18
Flags with carried forward coverage won't be shown. Click here to find out more. |
bcc7833 to
485d724
Compare
|
@status-im/devops guys can you please assist me with |
06d4055 to
3564b77
Compare
dde9a6b to
c61255e
Compare
|
The trick is actually that # The SRI hash of the vendored dependencies.
# If `vendorHash` is `null`, no dependencies are fetched and
# the build relies on the vendor folder within the source.
vendorHash ? throw (
if args ? vendorSha256 then
"buildGoModule: Expect vendorHash instead of vendorSha256"
else
"buildGoModule: vendorHash is missing"
),So from now on we need to specify a real hash. Which means it will have to be updated every time dependencies change. |
Thanks for fixing this.
@jakubgs is there any chance we can avoid this? It's gonna be quite an annoying procedure 😄 |
|
I know of no built-in way of doing this. The purpose of We'd have to write some kind of script to generate the hash for us, but it would have to be committed anyway by the devs. |
b4cc062 to
daa5f1a
Compare
daa5f1a to
92c8018
Compare
9751a7d to
8dbdbca
Compare
f824870 to
d1d2aec
Compare
c9a2aac to
d06b803
Compare
|
|
d06b803 to
ab382cb
Compare
osmaczko
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🫶
eb76550 to
d0edf2d
Compare
ab382cb to
e08b53b
Compare
ci: update github pr workflow chore: update nix vendor hash
e08b53b to
a097641
Compare
Requires:
Description
Stop vendoring Go dependencies. Delete
vendor/directory.Reasoning
As for today, vendoring dependencies in Go is more of a burden than real need.
Major Go projects like
go-ethereumdon't vendor.The only reason for vendoring is to have all dependencies on hands in case one of them is suddenly becomes unavailable
(deleted of removed from public). On the other hand, it makes the repo heavier and PRs less clear, which we believe is more important. This becomes more obvious with the usage of
go tool(e.g. in PRs like #6933).nixWith this change, developers will need to update this
vendorHashmanually:status-go/nix/pkgs/status-go/library/default.nix
Line 14 in ae5ed83
I implemented
make vendortarget for this:status-go/Makefile
Lines 404 to 412 in 33218c6