Bug 2376131

Summary:	Golang Packages Vendored By Default
Product:	[Fedora] Fedora	Reporter:	Aoife Moloney <amoloney>
Component:	Changes Tracking	Assignee:	Maxwell G <maxwell>
Status:	ON_QA ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	asm, maxwell, mikel
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2309208

Description Aoife Moloney 2025-07-03 11:26:15 UTC

This is a tracking bug for Change: Golang Packages Vendored By Default
For more details, see: https://fedoraproject.org/wiki/Changes/GolangPackagesVendoredByDefault

Use vendored dependecies as the default and preferred option when building Golang applications, instead of relying on pre-packaged dependencies. This includes adopting Go Vendor Tools, a new set of tooling to handle license scanning, generating a cumulative SPDX expression for all dependencies, and creating reproducible vendor archives.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2025-08-19 21:12:15 UTC

Dear change owner, this is a reminder that your change is required to be 100% code complete by August 26, which is the start of beta freeze. Please provide a status update on your change in the Incomplete Changes Report if you are not able to move your change to 'ON_QA' before this date. If you need to defer your change to the next Fedora release, please let me know and I will reassign this bug and the change page. Thank you kindly.

Comment 2 Maxwell G 2025-08-19 23:17:13 UTC

The tooling and code is all written and shipped in Fedora, but we have not completed the Guidelines changes yet (they are being worked on in https://gitlab.com/fedora/sigs/go/packaging-guidelines-fork). I'll still mark this as ON_QA, but let me know if you think otherwise. Thanks!