All Versions
Latest Version
Avg Release Cycle
77 days
Latest Release
1793 days ago

Changelog History

  • v0.5.4 Changes

    July 01, 2019

    ๐Ÿš€ Released on June 13, 2019. We are looking for sponsors!

    • ๐Ÿ›  Fix an error in the TOML example for the Gopkg.toml documentation. (#2174)

    • ๐Ÿ›  Fix error when cleaning up git submodules with newer versions of git. Thanks @geearu for the fix. (#2168, #2176)

  • v0.5.3 Changes

    May 13, 2019

    ๐Ÿš€ Released on May 13, 2019

    ๐Ÿš€ 0.5.2 was released without a "v" prefix on the tag. The contents of this release are identical to 0.5.2.

  • v0.5.2 Changes

    May 08, 2019

    ๐Ÿš€ Released on May 8, 2019


    • Dep will read a netrc file now, which should allow you to authenticate against Gitlab and other private repositories that require basic auth. ([#2155][2155])

    • ๐Ÿ“œ Ignore "mod" VCS type in parseMetaGoImports ([#2152][2152])

    • ๐Ÿš€ Use correct filename for ARM releases.

  • v0.5.1 Changes

    March 11, 2019

    ๐Ÿš€ Released on February 16, 2019


    • โž• Add CI tests against go1.11.
    • ๐Ÿ›  Fix indefinite hang cloning Git repositories that failed fsck checks. (#2070)
    • The noverify field in Gopkg.toml allows for the preservation of excess files under vendor. (#2002)
    • โž• Add releases for arm, armv6 (#2102), s390x (#2070), and ppc architectures.
    • ๐Ÿ›  Fix handling of cyclic import graphs (#2003).
    • ๐Ÿ›  Fix error in preservation of vendor/.git (#2000).
    • ๐Ÿ›  Fix an edge case in lockdiff where all the projects may be removed from the lock file (#1972).
    • ๐Ÿ›  Fix panic related to projects. (#1945)

    ๐Ÿ› BUG FIXES:

    • ๐Ÿ”’ Correctly handle certain cases where dep ensure removed projects from Gopkg.lock. (#1945).
  • v0.5.0 Changes

    July 26, 2018


    • โž• Add CI tests against go1.10. Drop support for go1.8. (#1620).
    • โž• Added script. (#1533).
    • List out of date projects in dep status (#1553).
    • Enabled opt-in persistent caching via DEPCACHEAGE env var. (#1711).
    • ๐Ÿ‘ Allow DEPPROJECTROOT environment variable to supersede GOPATH deduction and explicitly set the current project's root (#1883).
    • dep ensure now explains what changes to the code or Gopkg.toml have induced solving (#1912).
    • ๐Ÿ”’ Hash digests of vendor contents are now stored in Gopkg.lock, and the contents of vendor are only rewritten on change or hash mismatch (#1912).
    • โž• Added support for ppc64/ppc64le.
    • ๐Ÿ†• New subcommand dep check quickly reports if imports, Gopkg.toml, Gopkg.lock, and vendor are out of sync (#1932).

    ๐Ÿ› BUG FIXES:

    • Excise certain git-related environment variables. (#1872)


    • โž• Add template operations support in dep status template output (#1549).
    • โฌ‡๏ธ Reduce network access by trusting local source information and only pulling from upstream when necessary (#1250).
    • โšก๏ธ Update our dependency on Masterminds/semver to follow upstream again now that Masterminds/semver#67 is merged(#1792).
    • ๐Ÿ”’ inputs-digest was removed from Gopkg.lock (#1912).
    • ๐Ÿ”’ Hash digests of vendor contents are now stored in Gopkg.lock, and the contents of vendor are only rewritten on change or hash mismatch (#1912).
    • Don't exclude Godeps folder (#1822).
    • โž• Add project-package relationship graph support in graphviz (#1588).
    • Limit concurrency of dep status to avoid hitting open file limits (#1923).

    ๐Ÿšง WIP:

    • ๐Ÿ”ง Enable importing external configuration from dependencies during init (#1277). This is feature flagged and disabled by default.
  • v0.4.1 Changes

    January 25, 2018

    ๐Ÿš‘ v0.4.1 is a hotfix release that addresses a significant omission in v0.4.0: per-project pruning rules in Gopkg.toml were not respected.

    ๐Ÿ›  In the interest of causing minimal disruption to existing CI infrastructure, this release also restores the original behavior of dep prune. The command is hidden, and the old behavior is still (even without the aforementioned bugfix) inferior to the new, dep ensure-integrated pruning behavior in every way.

    ๐Ÿš€ However, existing scripts based on dep prune will continue to work using the old behavior, giving users an opportunity to update their scripts without causing undue pain in the process. Note that a future release of dep will remove dep prune entirely, so fix your stuff now ๐Ÿ˜„

  • v0.4.0 Changes

    January 25, 2018

    ๐Ÿšš v0.4.0 is a significant milestone for dep. It removes the dep prune command, absorbing its behavior entirely into dep ensure, with additional granular controls. This is an immediate boon for users' workflows, but it also unblocks the path to finishing essential parts of dep's design.

    โšก๏ธ It is strongly recommended that you update your Gopkg.toml to include the new pruning directives as soon as you update to this new version of dep. For most projects, adding this to Gopkg.toml will be fine:

    [prune] unused-packages = truego-tests = true

    This will do everything dep prune used to, and more, with fewer bugs.

    ๐Ÿ‘ Less verbose, but equally exciting news: dep init now supports automated conversions from govendor and glock!

    ๐Ÿ“š Finally, this release includes a new, detailed documentation site!


    • Absorb dep prune into dep ensure. (#944)
    • โž• Add support for importing from glock based projects. (#1422)
    • โž• Add support for importing from govendor based projects. (#815)
    • ๐Ÿ‘ Allow override of cache directory location using environment variable DEPCACHEDIR. (#1234)
    • โž• Add support for template output in dep status. (#1389
    • Each element in a multi-item TOML array is output on its own line. (#1461)

    ๐Ÿ› BUG FIXES:

    • ๐Ÿš€ Releases targeting Windows now have a .exe suffix. (#1291)
    • Adaptively recover from dirty and corrupted git repositories in cache. (#1279)
    • Suppress git password prompts in more places. (#1357)
    • ๐Ÿ›  Fix -no-vendor flag for ensure -update. (#1361)
    • Validate git ls-remote output and ignore all malformed lines. (#1379)
    • ๐Ÿ‘Œ Support version zero. (#1243)
    • ๐Ÿ›  Fix how dep status print revision constraints. (#1421)
    • โž• Add optional -v flag to ensure sub command's syntax. (#1458)
    • ๐Ÿ‘ Allow URLs containing ports in Gopkg.toml source fields. (#1509)


    • ๐ŸŒฒ Log as dependencies are pre-fetched during dep init. (#1176)
    • ๐Ÿ“ฆ Make the gps package importable. (#1349)
    • ๐Ÿ‘Œ Improve file copy performance by not forcing a file sync. (#1408)
    • Skip empty constraints during import. (#1414)
    • ๐Ÿ– Handle errors when writing status output. (#1420)
    • โž• Add constraint for locked projects in dep status. (#962)
    • ๐Ÿ‘‰ Make external config importers error tolerant. (#1315)
    • โœ… Show LATEST and VERSION as the same type in status. (#1515)
    • Warn when [[constraint]] rules that will have no effect. (#1534)
  • v0.3.2 Changes

    October 19, 2017


    • โž• Add support for importing from gvt and gb. (#1149)
    • ๐Ÿ‘ Wildcard ignore support. (#1156)
    • ๐Ÿ”’ Disable SourceManager lock by setting DEPNOLOCK environment variable.
    • dep ensure -no-vendor -dry-run now exits with an error when changes would
      ๐Ÿ”’ have to be made to Gopkg.lock. This is useful for CI. (#1256)

    ๐Ÿ› BUG FIXES:

    • gps: Fix case mismatch error with multiple dependers. (#1233)
    • Skip broken vendor symlink rather than returning an error. (#1191)
    • ๐Ÿ›  Fix status shows incorrect reason for lock mismatch when ignoring packages.


    • ๐Ÿ‘ Allow dep ensure -add and -update when lock is out-of-sync. (#1225)
    • gps: vcs: Dedupe git version list (#1212)
    • gps: Add prune functions to gps. (#1020)
    • gps: Skip broken vendor symlinks. (#1191)
    • dep ensure -add now concurrently fetches the source and adds the projects.
    • ๐Ÿ”’ File name case check is now performed on Gopkg.toml and Gopkg.lock.
    • ๐Ÿ‘ gps: gps now supports pruning. (#1020)
    • โšก๏ธ dep ensure -update now concurrently validates the passed project arguments.
      ๐ŸŽ Improving performance when updating dependencies with -update. (#1175)
    • ๐ŸŽ dep status now concurrently fetches repo info. Improving status performance.
    • gps: Add SourceURLsForPath() to SourceManager. (#1166)
    • gps: Include output in error. (#1180)

    ๐Ÿšง WIP:

    • gps: Process canonical import paths. (#1017)
    • gps: Persistent cache. (#1127, #1215)
  • v0.3.1 Changes

    September 19, 2017

    ๐Ÿ”„ Changes since v0.3.0:

    • gps: Add satisfiability check for case variants (#1079)
    • Validate Project Roots in manifest (#1116)
    • gps: Properly separate sources for different versions & github
    • gps: Add persistent BoltDB cache (#1098)
    • 0๏ธโƒฃ gps: Increase default subcommand timeout to 30s (#1087)
    • ๐Ÿ›  Fix importer issue where the
      importer would drop the imported version of a project (#1100)
    • ๐Ÿ”’ Import analyzer now always uses the same name, fixing the lock mismatch
      immediately after dep init issue (#1099)
    • โž• Add support for importing from govend
      (#1040) and LK4D4/vndr (#978) based projects
    • gps: gps no longer assumes that every git repo has a HEAD (#1053)
    • ๐Ÿ os.Chmod failures on Windows due to long path length has been fixed (#925)
    • โž• Add version command (#996)
    • โฌ‡๏ธ Drop support for building with go1.7 (#714)
    • ๐Ÿ“œ gps: Parse abbreviated git revisions (#1027)
    • gps: Parallelize writing dep tree (#1021)
    • status now shows the progress in verbose mode (#1009, #1037)
    • ๐Ÿ›  Fix empty Constraint and Version in status json output (#976)
    • status table output now shows override constraints (#918)
    • โš  gps: Display warning message every 15 seconds when lockfile is busy (#958)
    • gps: Hashing directory tree and tree verification (#959)
    • โšก๏ธ ensure now has -vendor-only mode to populate vendor/ without updating
      ๐Ÿ”’ Gopkg.lock (#954)
    • ๐Ÿ‘‰ Use fork of Masterminds/semver until
      Masterminds/semver issue#59
      ๐Ÿ›  is fixed upstream (#938)
    • ๐Ÿ“ฆ gps: Ensure packages are deducible before attempting to solve (#697)

    ๐ŸŽ Note that a number of these changes represent larger WIP - for example, the tree hashing, or the persistent boltdb cache: these will both be major boons to performance once complete, but the code integrated in those PRs is not in active use just yet.

  • v0.3.0 Changes

    August 04, 2017


    ๐Ÿ‘ Better changelogs coming soon, we hope. The big change of note in this release is that dep ensure has been significantly refactored, has several new flags, and bare dep ensure no longer takes arguments (e.g. dep ensure, as that approach has always been confusing and only a half-measure.

    ๐Ÿ‘€ See dep help ensure and dep ensure -examples for more guidance.