Skip to content
This repository was archived by the owner on Aug 10, 2021. It is now read-only.

remove go.mod, as the version is incompatible #17

Merged
merged 1 commit into from
Aug 9, 2021

Conversation

thaJeztah
Copy link

commit bc6d185, which is a security
fix, also added a go.mod to this repository. However, the current
name of this project does not include a versioned import-path,
which makes the module not usable when using a tag. (go modules
allows invalid versions (+incompatible) if the repository does
not have a go.mod, but will refuse to use the module otherwise.

This patch removes the go.mod

relates to #14, distribution/distribution#3459 (comment)

It possible, a new tag should be made with this fix, to prevent users from being able to use the security fix

commit bc6d185, which is a security
fix, also added a go.mod to this repository. However, the current
name of this project does not include a versioned import-path,
which makes the module not usable when using a tag. (go modules
allows invalid versions (`+incompatible`) if the repository does
not have a go.mod, but will refuse to use the module otherwise.

This patch removes the go.mod

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@thaJeztah
Copy link
Author

@alex-pricope-form3
Copy link

Thanks for the detailed report - we will merge this.
Also we are planning to archive this repo and switch to https://github.com/golang-jwt/jwt . This contains all the fixes in this fork.

@alex-pricope-form3 alex-pricope-form3 merged commit 6ba3f55 into form3tech-oss:master Aug 9, 2021
@thaJeztah thaJeztah deleted the remove_mod branch August 9, 2021 14:29
@thaJeztah
Copy link
Author

Also we are planning to archive this repo and switch to https://github.com/golang-jwt/jwt . This contains all the fixes in this fork.

Thanks! I was planning to open a ticket around that to propose doing so (unifying the forks); golang-jwt/jwt#40 (comment), but didn't come round to it yet 👍

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants