chore: add replace directives for mergo in go.mod#396
Conversation
The domain registration for dario.cat has expired, which has broken our licenses check and breaks build anywhere that doesn't have this module cached. There's a potential security risk if the author does not re-register this domain because a malicious party could capture this domain and redirect to a modified copy of the module. Luckily, this is just a vanity URL, and the module is hosted on GitHub. This commit fixes the issue by adding `replace` directives to our go.mod file. Note that we will need to manually keep the replaced version in sync with our dependencies.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (3)
📝 WalkthroughWalkthroughThis PR migrates the mergo dependency from the ChangesMergo dependency migration to darccio organization
Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
| Duplication | 0 |
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
Summary
The domain registration for dario.cat has expired, which has broken our licenses check and breaks build anywhere that doesn't have this module cached. There's a potential security risk if the author does not re-register this domain because a malicious party could capture this domain and redirect to a modified copy of the module.
Luckily, this is just a vanity URL, and the module is hosted on GitHub. This commit fixes the issue by adding
replacedirectives to our go.mod file. Note that we will need to manually keep the replaced version in sync with our dependencies.