Hacker News new | ask | show | jobs
by wsy 2950 days ago
AFAIK vgo only allows me to pin individual packages, but not whole trees. How would I pin a dependency tree in vgo?
1 comments

You can copy the output of "vgo list -m" (the list of transitive dependencies with the selected versions) into the "require" section of "go.mod" and increase the versions that you want to change. (The next invocation of "vgo verify" will delete the lines with versions that you did not change because they are implied by the lines with versions that were not deleted.)
thanks for the detailed explanation. That would at least provide a workaround.