Bug 2376131 - Golang Packages Vendored By Default
Summary: Golang Packages Vendored By Default
Keywords:
Status: ON_QA
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Maxwell G
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: F43Changes
TreeView+ depends on / blocked
 
Reported: 2025-07-03 11:26 UTC by Aoife Moloney
Modified: 2025-08-19 23:17 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Aoife Moloney 2025-07-03 11:26:15 UTC
This is a tracking bug for Change: Golang Packages Vendored By Default
For more details, see: https://fedoraproject.org/wiki/Changes/GolangPackagesVendoredByDefault

Use vendored dependecies as the default and preferred option when building Golang applications, instead of relying on pre-packaged dependencies. This includes adopting Go Vendor Tools, a new set of tooling to handle license scanning, generating a cumulative SPDX expression for all dependencies, and creating reproducible vendor archives.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2025-08-19 21:12:15 UTC
Dear change owner, this is a reminder that your change is required to be 100% code complete by August 26, which is the start of beta freeze. Please provide a status update on your change in the Incomplete Changes Report if you are not able to move your change to 'ON_QA' before this date. If you need to defer your change to the next Fedora release, please let me know and I will reassign this bug and the change page. Thank you kindly.

Comment 2 Maxwell G 2025-08-19 23:17:13 UTC
The tooling and code is all written and shipped in Fedora, but we have not completed the Guidelines changes yet (they are being worked on in https://gitlab.com/fedora/sigs/go/packaging-guidelines-fork). I'll still mark this as ON_QA, but let me know if you think otherwise. Thanks!


Note You need to log in before you can comment on or make changes to this bug.