> Can simply replacing the dependency in all of them with bbolt work? I don't know myself, but some upstream think it's not a trivial change. For example, see:
https://github.com/hashicorp/raft-boltdb/pull/19#issuecomment-703732437 In short: hashicorp-raft-boltdb wants to make sure there's no issue before making the change. This change would impact reverse build deps of hashicorp-raft-boltdb, like nomad or consul. I think it's better to downgrade the severity here (as was done in coreos-bbolt, see https://bugs.debian.org/976926).
