use dep to lock Go dependencies (without vendor/)

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>
fiberfjord · Jul 31, 2018 · 4572974 · 4572974
1 parent 58e1879
commit 4572974
Show file tree

Hide file tree

Showing 9 changed files with 771 additions and 8 deletions.
diff --git a/src/.gitignore b/src/.gitignore
@@ -1,8 +1,5 @@
-# block vgo cache dir
-v/
-# temp gopath
-github.com
-golang.org
-google.golang.org
-cloud.google.com
-go.opencensus.io
+# Go: for the time being we are not checking in the vendor/ directories to git
+# to prevent the repo from getting larger forever. In each Go service, you can
+# run "dep ensure --vendor-only" to download the dependencies to vendor/ based
+# on the Gopkg.{toml,lock} files in that directory.
+vendor/
diff --git a/src/checkoutservice/Gopkg.lock b/src/checkoutservice/Gopkg.lock
diff --git a/src/checkoutservice/Gopkg.toml b/src/checkoutservice/Gopkg.toml
@@ -0,0 +1,54 @@
+# Gopkg.toml example
+#
+# Refer to https://golang.github.io/dep/docs/Gopkg.toml.html
+# for detailed Gopkg.toml documentation.
+#
+# required = ["github.com/user/thing/cmd/thing"]
+# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
+#
+# [[constraint]]
+#   name = "github.com/user/project"
+#   version = "1.0.0"
+#
+# [[constraint]]
+#   name = "github.com/user/project2"
+#   branch = "dev"
+#   source = "github.com/myfork/project2"
+#
+# [[override]]
+#   name = "github.com/x/y"
+#   version = "2.4.0"
+#
+# [prune]
+#   non-go = false
+#   go-tests = true
+#   unused-packages = true
+
+
+[[constraint]]
+  name = "cloud.google.com/go"
+  version = "0.25.0"
+
+[[constraint]]
+  name = "github.com/golang/protobuf"
+  version = "1.1.0"
+
+[[constraint]]
+  name = "github.com/google/uuid"
+  version = "0.2.0"
+
+[[constraint]]
+  name = "go.opencensus.io"
+  version = "0.14.0"
+
+[[constraint]]
+  branch = "master"
+  name = "golang.org/x/net"
+
+[[constraint]]
+  name = "google.golang.org/grpc"
+  version = "1.13.0"
+
+[prune]
+  go-tests = true
+  unused-packages = true