{"push_id":3135314356,"size":2,"distinct_size":1,"ref":"refs/heads/master","head":"85c4861949ca47375d07f10eb0963cc42dee70a8","before":"72a30cde14d280b7aceb5b8a528834e1e27c3a84","commits":[{"sha":"27945e368ac71675bd42fee17d187961ee63b34e","author":{"name":"James Nugent","email":"474ba67bdb289c6263b36dfd8a7bed6c85b04943@jen20.com"},"message":"Target exact versions in `govendor-override`\n\n`govendor-override` is designed to _exactly_ match the dependency versions\nspecified by an upstream Terraform provider when resolving dependencies for a\nPulumi resource provider based upon it.\n\nUnfortunately, we misinterpreted the semantics of `dep` when a semantic version\nis specified, and as such were pinning to a major version, but not an exact\nversion. For a long time, semantic versioning worked as designed and we didn't\nsee an breakage with this, but terraform-providers/terraform-provider-aws#6806\nsaw a regression in an upstream library meaning pinning to the exact version of\nthe AWS SDK specified by upstream is required.\n\nAccording to the dep docs:\n\n> When you specify a version without an operator, dep automatically uses the ^\n> operator by default. dep ensure will interpret the given version as the\n> min-boundary of a range, for example:\n> - 1.2.3 becomes the range >=1.2.3, <2.0.0\n> - 0.2.3 becomes the range >=0.2.3, <0.3.0\n> - 0.0.3 becomes the range >=0.0.3, <0.1.0\n\nFurther, to specify an exact version:\n\n> To pin a version of direct dependency in manifest, prefix the version with =.\n> For example:\n> [[constraint]]\n>   name = \"github.com/pkg/errors\"\n>   version = \"=0.8.0\"\n\nThis commit switches govendor-override to _always_ pin exact versions rather\nthan version ranges, in line with the aim of the tool.","distinct":false,"url":"https://api.github.com/repos/pulumi/scripts/commits/27945e368ac71675bd42fee17d187961ee63b34e"},{"sha":"85c4861949ca47375d07f10eb0963cc42dee70a8","author":{"name":"James Nugent","email":"474ba67bdb289c6263b36dfd8a7bed6c85b04943@jen20.com"},"message":"Merge pull request #21 from pulumi/jen20/govendor-override-exact-versions\n\nTarget exact versions in `govendor-override`","distinct":true,"url":"https://api.github.com/repos/pulumi/scripts/commits/85c4861949ca47375d07f10eb0963cc42dee70a8"}]}
{"actor":{"display_login":"jen20"}}