Skip to content

chore(deps): vendor dependencies#4900

Open
soltysh wants to merge 4 commits into
zarf-dev:mainfrom
soltysh:vendor
Open

chore(deps): vendor dependencies#4900
soltysh wants to merge 4 commits into
zarf-dev:mainfrom
soltysh:vendor

Conversation

@soltysh

@soltysh soltysh commented May 14, 2026

Copy link
Copy Markdown
Contributor

Description

Vendor dependencies into the repository, see ZEP-0010 for reasoninig.

Related Issue

Relates to zarf-dev/proposals#10

Checklist before merging

@soltysh soltysh requested review from a team as code owners May 14, 2026 09:52
@soltysh soltysh moved this to PR Review in Zarf May 14, 2026
@netlify

netlify Bot commented May 14, 2026

Copy link
Copy Markdown

Deploy Preview for zarf-docs canceled.

Name Link
🔨 Latest commit a9154de
🔍 Latest deploy log https://app.netlify.com/projects/zarf-docs/deploys/6a07373bf8e4f000083bb4c1

@soltysh soltysh changed the title Vendor dependencies chore(deps): vendor dependencies May 14, 2026
@a1994sc

a1994sc commented May 14, 2026

Copy link
Copy Markdown
Contributor

Slightly off topic, but vendoring is one way cilium secures its CI CD

https://cilium.io/blog/2026/05/06/securing-cicd-open-source-lessons-from-cilium/

@soltysh

soltysh commented May 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like the failures might have been caused by our .gitignore configuration. I've updated it to skip some patterns. Let's see how CI reacts 🤞

soltysh added 4 commits May 15, 2026 17:12
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
@codecov

codecov Bot commented May 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@AustinAbro321 AustinAbro321 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

minor comments, otherwise good to go

Comment thread .gitignore
build
data/
/build
/data/

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
/data/
/src/test/external/data/

The intent of this was for this location to be excluded, we can just set it explicitly

Comment thread Makefile
# Note: the path to the main.go file is not used due to https://github.com/golang/go/issues/51831#issuecomment-1074188363
.PHONY: build
build: ## Build the Zarf CLI for the machines OS and architecture
go mod tidy

@AustinAbro321 AustinAbro321 May 28, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Matter of preference, but I like having go mod tidy here so I don't have to remember to run it before I commit. Thoughts on adding back go mod tidy and go mod vendor here as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: PR Review

Development

Successfully merging this pull request may close these issues.

4 participants