On 7/19/26 12:29 PM, Mathias Gibbens wrote:
On Sun, 2026-07-19 at 12:16 -0300, Pirate Praveen wrote:Looks like we have a newer version of the dependency, golang-github-imdario-mergo-dev | 1.0.2-1 | experimental | all So I think we will have to patch the go.mod file github.com/Masterminds/sprig or check if upstream has a newer version that works with the newer dependency.Yes, so now that we have module-aware builds, once XS-Go-Import-Path is properly set to reflect the actual (currently) packaged version of a Go library, we may need to package additional versions of the library to provide missing major versions. (Or a pre-semver 0.x version in this case.) I don't think we should try to patch go.mod files to change the major version they expect, as that kind of works against the effort to properly build Go code. It should be pretty easily to automate the packaging work of any additional versions of a Go library that need to be uploaded to NEW. But we'll need to consider how to handle the potential renaming of existing source/binary packages to properly reflect their major version.
New upstream version of github.com/Masterminds/sprig 3.3 no longer needs the older version. But when trying to update it, I get this error,
# github.com/Masterminds/sprig/v3src/github.com/stretchr/testify/assert/assertions.go:20:2: module github.com/davecgh/go-spew/spew provides package github.com/davecgh/go-spew/spew and is replaced but not required; to add it:
go get github.com/davecgh/go-spew/spew
I think Mathias is working on a fix for this module - to add a go.mod
file for this package.
So I will wait for a fix for this to continue.
Mathias
OpenPGP_0x8F53E0193B294B75.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
