dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

gomod does not update the go version that is defined in go.mod

Open sbp-bvanb opened this issue 2 years ago • 2 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Package ecosystem

gomod

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

No response

dependabot.yml content

---
version: 2
updates:
  - package-ecosystem: "gomod"
    directory: "/"
    schedule:
      interval: "daily"

Updated dependency

No response

What you expected to see, versus what you actually saw

The expectation is that the patch version of go should be updated from go 1.21.2 to go 1.21.7 and since the latest release of 1.22.0 to 1.22.0.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

Define: go 1.21.2 in a go.mod file.

sbp-bvanb avatar Feb 15 '24 16:02 sbp-bvanb

afaik, its not bug. Its missing feature

zetaab avatar Feb 20 '24 12:02 zetaab

Could you give some pointers how to implement it? I would like to create a PR.

sbp-bvanb avatar Feb 20 '24 15:02 sbp-bvanb

As long as Dependabot does not support the auto update of the Golang version that is defined in a go.mod file, the following GitHub action could be used to remediate the issue.

030 avatar Aug 10 '24 11:08 030