Details
-
Task
-
Resolution: Obsolete
-
Minor
-
None
-
None
Description
We should have a tool that automatically checks outdated go dependencies. Either stale repositories or repositories that haven't been updated recently.
As background for this, when looking at dependencies, I found dependencies that haven't been updated for multiple years while several new versions of those dependencies have come out. I've also found dependencies pointing at stale GitHub repos where the repo itself was archived and development of those dependencies was continued on other repositories. We should be able to pick up both of these cases and check to see if there are fixes that we need to pick up.
Attachments
Issue Links
- relates to
-
OSSM-756 Fix dependabot configuration on GitHub
- Closed