testify
testify copied to clipboard
go-difflib library v1.0.0 reached End Of Life
Description
Latest version depends on github.com/pmezard/go-difflib v1.0.0 that reached EOL
Step To Reproduce
- download master branch
- grep command will give the following output:
go.mod: github.com/pmezard/go-difflib v1.0.0
mock/mock.go: "github.com/pmezard/go-difflib/difflib"
go.sum:github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
go.sum:github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
assert/assertions.go: "github.com/pmezard/go-difflib/difflib"
Expected behavior
testify should not depend on EOL libraries
It's probably fine, the dependency works as intended. The dependency itself doesn't have any dependencies.
Duplicate of #1159
Resolved by vendoring go-difflib
- https://github.com/stretchr/testify/pull/1708
See https://github.com/stretchr/testify/issues/1159#issuecomment-3281982413