Use vendored dependencies as the default and preferred option when building Golang applications, instead of relying on pre-packaged dependencies. This includes adopting [https://fedora.gitlab.io/sigs/go/go-vendor-tools/ Go Vendor Tools], a new set of tooling to handle license scanning, generating a cumulative SPDX expression for all dependencies, and creating reproducible vendor archives.
Owners, do not implement this work until the FESCo vote has explicitly ended. The Fedora Program Manager will create a tracking bug in Bugzilla for this Change, which is your indication to proceed. See the FESCo ticket policy and the Changes policy for more information.
REMINDER: This ticket is for FESCo members to vote on the proposal. Further discussion should happen in the Discourse discussion linked above. Additional discussion may happen on the Fedora Devel mailing list.
+1 as Change Owner
+1
edited: not FESCo member - Sorry
@marcusburghardt voting here is reserved to FESCo memebers. Please abstain voting on FESCo tickets
After a week, APPROVED (7, 0, 0)
Metadata Update from @amoloney: - Issue tagged with: pending announcement
Announced: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/4EHEV57OLAUEYPABK75J6QXZKPSRWXQR/
Metadata Update from @zbyszek: - Issue untagged with: pending announcement - Issue close_status updated to: Accepted - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.