On Fri, 23 Jan 2026 15:21:43 +0100, Andrew Lee <[email protected]> wrote: > On Fri, Jan 23, 2026 at 3:15 PM Simon Josefsson <[email protected]> wrote: > > What is your proposal, to be clear? Packaging google-cloud as a > > separate package, even if severely stripped down, is fine. I wouldn't > > vendor any of these files, these aren't small or trivial packages... > > I relized I was wrong. Even the upstream provides a git tag as > `auth/v0.17.0`. It still contains the whole google-cloud source package.
See https://go.dev/ref/mod#vcs-version to understand how tags with submodules should be interpreted. auth/v0.17.0 applies to everything under auth/, even though the tree given by the tag contains everything. Regards, Stephen
pgpzvYKK8OaFS.pgp
Description: OpenPGP digital signature
