Update dependency-upgrades.md

pull/36374/head
Hadi Cherkaoui 1 year ago committed by GitHub
parent 342ad78a53
commit dbaed4e2e9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -76,16 +76,16 @@ typically fail.
To apply the proposed change, you'll need to check out the branch that
Dependabot created on your development system, run `make syncdeps`, add
all of the files that get modified, and then amend dependabot's commit using
all of the files that get modified, and then amend Dependabot's commit using
`git commit --amend`.
After you've done this, use `git push --force` to replace dependabot's original
After you've done this, use `git push --force` to replace Dependabot's original
commit with your new commit, and then wait for GitHub to re-run the PR
checks. The code consistency checks should now pass.
We've configured Dependabot to monitor only the root `go.mod` file for potential
upgrades, because that one aggregates the dependencies for all other child
modules. Therefore there should never be a dependabot upgrade targeting a
modules. Therefore there should never be a Dependabot upgrade targeting a
module in a subdirectory. If one _does_ get created somehow, you should close
it and perform the same upgrade at the root of the repository instead, using
the instructions in [Upgrading a Dependency](#upgrading-a-dependency) above.
@ -124,7 +124,7 @@ special constraints due to how Terraform uses them:
that would therefore cause the next Terraform version to break the
v1.x compatibility promises.
Terraform's use of `go-getter` is all encapulated in `internal/getmodules`
Terraform's use of `go-getter` is all encapsulated in `internal/getmodules`
and is set up to try to minimize the possibility that a go-getter upgrade
would immediately introduce new functionality, but that encapsulation cannot
prevent adoption of changes made to pre-existing functionality that

Loading…
Cancel
Save