github.com/golang/dep@v0.5.4/CHANGELOG.md (about) 1 # v0.5.4 2 3 Released on June 13, 2019. We are [looking for 4 sponsors!](https://github.com/golang/dep/issues/2165) 5 6 - Fix an error in the TOML example for the Gopkg.toml documentation. 7 ([#2174][2174]) 8 9 - Fix error when cleaning up git submodules with newer versions of git. Thanks 10 @geearu for the fix. ([#2168][2168], [#2176][2176]) 11 12 [2168]: https://github.com/golang/dep/pull/2168 13 [2174]: https://github.com/golang/dep/pull/2174 14 [2176]: https://github.com/golang/dep/pull/2176 15 16 # v0.5.3 17 18 Released on May 13, 2019 19 20 0.5.2 was released without a "v" prefix on the tag. The contents of this release 21 are identical to 0.5.2. 22 23 # 0.5.2 24 25 Released on May 8, 2019 26 27 IMPROVEMENTS: 28 29 * Dep will read a netrc file now, which should allow you to authenticate against 30 Gitlab and other private repositories that require basic auth. ([#2155][2155]) 31 32 * Ignore "mod" VCS type in parseMetaGoImports ([#2152][2152]) 33 34 * Use correct filename for ARM releases. 35 36 # v0.5.1 37 38 Released on February 16, 2019 39 40 IMPROVEMENTS: 41 42 * Add CI tests against go1.11. 43 * Fix indefinite hang cloning Git repositories that failed fsck checks. ([#2070][2070]) 44 * The `noverify` field in `Gopkg.toml` allows for the preservation of excess files under `vendor`. ([#2002](https://github.com/golang/dep/issue/2002)) 45 * Add releases for `arm`, `armv6` ([#2102][2102]), `s390x` ([#2070][2070]), and `ppc` architectures. 46 * Fix handling of cyclic import graphs ([#2003][2003]). 47 * Fix error in preservation of vendor/.git ([#2000][2000]). 48 * Fix an edge case in lockdiff where all the projects may be removed from the lock file ([#1972][1972]). 49 * Fix panic related to projects. ([#1945][1945]) 50 51 [2102]: https://github.com/golang/dep/pull/2102 52 [2070]: https://github.com/golang/dep/pull/2070 53 [2000]: https://github.com/golang/dep/pull/2000 54 [1981]: https://github.com/golang/dep/pull/1981 55 [2003]: https://github.com/golang/dep/pull/2003 56 [1972]: https://github.com/golang/dep/pull/1972 57 [1945]: https://github.com/golang/dep/pull/1945 58 59 BUG FIXES: 60 61 * Correctly handle certain cases where `dep ensure` removed projects from Gopkg.lock. ([#1945](https://github.com/golang/dep/issue/1945)). 62 63 # v0.5.0 64 65 NEW FEATURES: 66 67 * Add CI tests against go1.10. Drop support for go1.8. ([#1620](https://github.com/golang/dep/pull/1620)). 68 * Added `install.sh` script. ([#1533](https://github.com/golang/dep/pull/1533)). 69 * List out of date projects in dep status ([#1553](https://github.com/golang/dep/pull/1553)). 70 * Enabled opt-in persistent caching via `DEPCACHEAGE` env var. ([#1711](https://github.com/golang/dep/pull/1711)). 71 * Allow `DEPPROJECTROOT` [environment variable](https://golang.github.io/dep/docs/env-vars.html#depprojectroot) to supersede GOPATH deduction and explicitly set the current project's [root](https://golang.github.io/dep/docs/glossary.html#project-root) ([#1883](https://github.com/golang/dep/pull/1883)). 72 * `dep ensure` now explains what changes to the code or Gopkg.toml have induced solving ([#1912](https://github.com/golang/dep/pull/1912)). 73 * Hash digests of vendor contents are now stored in `Gopkg.lock`, and the contents of vendor are only rewritten on change or hash mismatch ([#1912](https://github.com/golang/dep/pull/1912)). 74 * Added support for ppc64/ppc64le. 75 * New subcommand `dep check` quickly reports if imports, Gopkg.toml, Gopkg.lock, and vendor are out of sync ([#1932](https://github.com/golang/dep/pull/1932)). 76 77 BUG FIXES: 78 79 * Excise certain git-related environment variables. ([#1872](https://github.com/golang/dep/pull/1872)) 80 81 IMPROVEMENTS: 82 83 * Add template operations support in dep status template output ([#1549](https://github.com/golang/dep/pull/1549)). 84 * Reduce network access by trusting local source information and only pulling from upstream when necessary ([#1250](https://github.com/golang/dep/pull/1250)). 85 * Update our dependency on Masterminds/semver to follow upstream again now that [Masterminds/semver#67](https://github.com/Masterminds/semver/pull/67) is merged([#1792](https://github.com/golang/dep/pull/1792)). 86 * `inputs-digest` was removed from `Gopkg.lock` ([#1912](https://github.com/golang/dep/pull/1912)). 87 * Hash digests of vendor contents are now stored in `Gopkg.lock`, and the contents of vendor are only rewritten on change or hash mismatch ([#1912](https://github.com/golang/dep/pull/1912)). 88 * Don't exclude `Godeps` folder ([#1822](https://github.com/golang/dep/issues/1822)). 89 * Add project-package relationship graph support in graphviz ([#1588](https://github.com/golang/dep/pull/1588)). 90 * Limit concurrency of `dep status` to avoid hitting open file limits ([#1923](https://github.com/golang/dep/issue/1923)). 91 92 WIP: 93 * Enable importing external configuration from dependencies during init (#1277). This is feature flagged and disabled by default. 94 95 # v0.4.1 96 97 NEW FEATURES: 98 99 BUG FIXES: 100 101 * Fix per-project prune option handling ([#1570](https://github.com/golang/dep/pull/1570)) 102 103 # v0.4.0 104 105 NEW FEATURES: 106 107 * Absorb `dep prune` into `dep ensure`. ([#944](https://github.com/golang/dep/issues/944)) 108 * Add support for importing from [glock](https://github.com/robfig/glock) based projects. ([#1422](https://github.com/golang/dep/pull/1422)) 109 * Add support for importing from [govendor](https://github.com/kardianos/govendor) based projects. ([#815](https://github.com/golang/dep/pull/815)) 110 * Allow override of cache directory location using environment variable `DEPCACHEDIR`. ([#1234](https://github.com/golang/dep/pull/1234)) 111 * Add support for template output in `dep status`. ([#1389](https://github.com/golang/dep/pull/1389)) 112 * Each element in a multi-item TOML array is output on its own line. ([#1461](https://github.com/golang/dep/pull/1461)) 113 114 BUG FIXES: 115 116 * Releases targeting Windows now have a `.exe` suffix. ([#1291](https://github.com/golang/dep/pull/1291)) 117 * Adaptively recover from dirty and corrupted git repositories in cache. ([#1279](https://github.com/golang/dep/pull/1279)) 118 * Suppress git password prompts in more places. ([#1357](https://github.com/golang/dep/pull/1357)) 119 * Fix `-no-vendor` flag for `ensure -update`. ([#1361](https://github.com/golang/dep/pull/1361)) 120 * Validate `git ls-remote` output and ignore all malformed lines. ([#1379](https://github.com/golang/dep/pull/1379)) 121 * Support [gopkg.in version zero](http://labix.org/gopkg.in#VersionZero). ([#1243](https://github.com/golang/dep/pull/1243)) 122 * Fix how dep status print revision constraints. ([#1421](https://github.com/golang/dep/pull/1421)) 123 * Add optional `-v` flag to ensure sub command's syntax. ([#1458](https://github.com/golang/dep/pull/1458)) 124 * Allow URLs containing ports in `Gopkg.toml` `source` fields. ([#1509](https://github.com/golang/dep/pull/1509)) 125 126 IMPROVEMENTS: 127 128 * Log as dependencies are pre-fetched during dep init. ([#1176](https://github.com/golang/dep/pull/1176)) 129 * Make the gps package importable. ([#1349](https://github.com/golang/dep/pull/1349)) 130 * Improve file copy performance by not forcing a file sync. ([#1408](https://github.com/golang/dep/pull/1408)) 131 * Skip empty constraints during import. ([#1414](https://github.com/golang/dep/pull/1349)) 132 * Handle errors when writing status output. ([#1420](https://github.com/golang/dep/pull/1420)) 133 * Add constraint for locked projects in `dep status`. ([#962](https://github.com/golang/dep/pull/962)) 134 * Make external config importers error tolerant. ([#1315](https://github.com/golang/dep/pull/1315)) 135 * Show LATEST and VERSION as the same type in status. ([#1515](https://github.com/golang/dep/pull/1515)) 136 * Warn when [[constraint]] rules that will have no effect. ([#1534](https://github.com/golang/dep/pull/1534)) 137 138 # v0.3.2 139 140 NEW FEATURES: 141 142 * Add support for importing from [gvt](https://github.com/FiloSottile/gvt) 143 and [gb](https://godoc.org/github.com/constabulary/gb/cmd/gb-vendor). 144 ([#1149](https://github.com/golang/dep/pull/1149)) 145 * Wildcard ignore support. ([#1156](https://github.com/golang/dep/pull/1156)) 146 * Disable SourceManager lock by setting `DEPNOLOCK` environment variable. 147 ([#1206](https://github.com/golang/dep/pull/1206)) 148 * `dep ensure -no-vendor -dry-run` now exits with an error when changes would 149 have to be made to `Gopkg.lock`. This is useful for CI. ([#1256](https://github.com/golang/dep/pull/1256)) 150 151 BUG FIXES: 152 153 * gps: Fix case mismatch error with multiple dependers. ([#1233](https://github.com/golang/dep/pull/1233)) 154 * Skip broken `vendor` symlink rather than returning an error. ([#1191](https://github.com/golang/dep/pull/1191)) 155 * Fix `status` shows incorrect reason for lock mismatch when ignoring packages. 156 ([#1216](https://github.com/golang/dep/pull/1216)) 157 158 IMPROVEMENTS: 159 160 * Allow `dep ensure -add` and `-update` when lock is out-of-sync. ([#1225](https://github.com/golang/dep/pull/1225)) 161 * gps: vcs: Dedupe git version list ([#1212](https://github.com/golang/dep/pull/1212)) 162 * gps: Add prune functions to gps. ([#1020](https://github.com/golang/dep/pull/1020)) 163 * gps: Skip broken vendor symlinks. ([#1191](https://github.com/golang/dep/pull/1191)) 164 * `dep ensure -add` now concurrently fetches the source and adds the projects. 165 ([#1218](https://github.com/golang/dep/pull/1218)) 166 * File name case check is now performed on `Gopkg.toml` and `Gopkg.lock`. 167 ([#1114](https://github.com/golang/dep/pull/1114)) 168 * gps: gps now supports pruning. ([#1020](https://github.com/golang/dep/pull/1020)) 169 * `dep ensure -update` now concurrently validates the passed project arguments. 170 Improving performance when updating dependencies with `-update`. ([#1175](https://github.com/golang/dep/pull/1175)) 171 * `dep status` now concurrently fetches repo info. Improving status performance. 172 ([#1135](https://github.com/golang/dep/pull/1135)) 173 * gps: Add SourceURLsForPath() to SourceManager. ([#1166](https://github.com/golang/dep/pull/1166)) 174 * gps: Include output in error. ([#1180](https://github.com/golang/dep/pull/1180)) 175 176 WIP: 177 178 * gps: Process canonical import paths. ([#1017](https://github.com/golang/dep/pull/1017)) 179 * gps: Persistent cache. ([#1127](https://github.com/golang/dep/pull/1127), [#1215](https://github.com/golang/dep/pull/1215)) 180 181 182 # v0.3.1 183 184 * gps: Add satisfiability check for case variants ([#1079](https://github.com/golang/dep/pull/1079)) 185 * Validate Project Roots in manifest ([#1116](https://github.com/golang/dep/pull/1116)) 186 * gps: Properly separate sources for different gopkg.in versions & github 187 ([#1132](https://github.com/golang/dep/pull/1132)) 188 * gps: Add persistent BoltDB cache ([#1098](https://github.com/golang/dep/pull/1098)) 189 * gps: Increase default subcommand timeout to 30s ([#1087](https://github.com/golang/dep/pull/1087)) 190 * Fix importer [issue](https://github.com/golang/dep/issues/939) where the 191 importer would drop the imported version of a project ([#1100](https://github.com/golang/dep/pull/1100)) 192 * Import analyzer now always uses the same name, fixing the lock mismatch 193 immediately after dep init issue ([#1099](https://github.com/golang/dep/pull/1099)) 194 * Add support for importing from [govend](https://github.com/govend/govend) 195 (#1040) and [LK4D4/vndr](https://github.com/LK4D4/vndr) ([#978](https://github.com/golang/dep/pull/978)) based projects 196 * gps: gps no longer assumes that every git repo has a HEAD ([#1053](https://github.com/golang/dep/pull/1053)) 197 * `os.Chmod` failures on Windows due to long path length has been fixed ([#925](https://github.com/golang/dep/pull/925)) 198 * Add `version` command ([#996](https://github.com/golang/dep/pull/996)) 199 * Drop support for building with go1.7 ([#714](https://github.com/golang/dep/pull/714)) 200 * gps: Parse abbreviated git revisions ([#1027](https://github.com/golang/dep/pull/1027)) 201 * gps: Parallelize writing dep tree ([#1021](https://github.com/golang/dep/pull/1021)) 202 * `status` now shows the progress in verbose mode ([#1009](https://github.com/golang/dep/pull/1009), [#1037](https://github.com/golang/dep/pull/1037)) 203 * Fix empty `Constraint` and `Version` in `status` json output ([#976](https://github.com/golang/dep/pull/976)) 204 * `status` table output now shows override constraints ([#918](https://github.com/golang/dep/pull/918)) 205 * gps: Display warning message every 15 seconds when lockfile is busy ([#958](https://github.com/golang/dep/pull/958)) 206 * gps: Hashing directory tree and tree verification ([#959](https://github.com/golang/dep/pull/959)) 207 * `ensure` now has `-vendor-only` mode to populate vendor/ without updating 208 Gopkg.lock ([#954](https://github.com/golang/dep/pull/954)) 209 * Use fork of Masterminds/semver until 210 Masterminds/semver [issue#59](https://github.com/Masterminds/semver/issues/59) 211 is fixed upstream ([#938](https://github.com/golang/dep/pull/938)) 212 * gps: Ensure packages are deducible before attempting to solve ([#697](https://github.com/golang/dep/pull/697))