deps: downgrade oauth2 from 0.27 -> 0.26 #1615
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
go mod tidy
automatically updates the Go directives to point to the minimum golang version that is required by the dependencies. Ideally this should run on every update that involvesgo.mod
updates.oauth2 v0.27.0 requires at least Go v1.23 hence runnig
go mod tidy
would automatically bump Go directive and toolchain to the minimum Go version needed, v1.23. This conflicts with openshift conventions of dependencies for related containers.The bump to v0.27 was originally done in
#1211
but didn't have the bump of Go directive.
Since we want to proceed with 1.22 for 4.18 we want to downgrade oauth2 version to v0.26 at most while preserving goal of
a553b30 as v0.26 needs at least Go 1.18 https://github.com/golang/oauth2/blob/v0.26.0/go.mod which in turn will preserve the current Go v1.22 for 4.18.