Skip to content

chore(deps): replace unmaintained wk8/go-ordered-map with pb33f fork - #2642

Open
dimetron wants to merge 2 commits into
kagent-dev:mainfrom
dimetron:chore/deps-replace-wk8-ordered-map
Open

chore(deps): replace unmaintained wk8/go-ordered-map with pb33f fork#2642
dimetron wants to merge 2 commits into
kagent-dev:mainfrom
dimetron:chore/deps-replace-wk8-ordered-map

Conversation

@dimetron

Copy link
Copy Markdown
Contributor

What

Add a replace directive swapping the unmaintained github.com/wk8/go-ordered-map/v2 for its maintained fork github.com/pb33f/ordered-map/v2 (same package path and API). Same approach as lima-vm/lima#4916.

Why

wk8/go-ordered-map is unmaintained. It is still pulled into the module graph transitively by ollama/ollama (via internal/orderedmap) and securego/gosec (via golangci-lint), so a plain version bump cannot remove it — a replace is required. Neither upstream has dropped it yet (checked: Ollama v0.33.2 still requires it).

Details

  • replace github.com/wk8/go-ordered-map/v2 => github.com/pb33f/ordered-map/v2 v2.1.8
    • v2.1.8 is pb33f's fork of wk8 v2.1.8, API-identical.
    • v2.3.1 cannot be used here: it is already in the graph under its own path (via invopop/jsonschema / Anthropic SDK), and Go refuses to serve one module version under two paths.
  • go mod tidy drops the wk8 hashes from go.sum and adds pb33f v2.1.8.
  • Incidental tidy fix: charmbracelet/x/ansi promoted from indirect to direct — it is imported directly by go/core/cli/internal/tui/panels.go.

Verification

  • go mod tidy — clean
  • go build ./... — pass
  • go test ./adk/pkg/embedding/... (pulls in Ollama) — pass
  • go vet ./adk/pkg/... — pass
  • go mod verify — all modules verified

wk8/go-ordered-map is unmaintained; pb33f/ordered-map is the maintained
fork with the same package path and API. It is still pulled into the
graph transitively by ollama/ollama and gosec, so a replace directive
is needed (same approach as lima-vm/lima#4916).

go mod tidy also promotes charmbracelet/x/ansi to a direct dependency,
as it is imported directly by core/cli/internal/tui/panels.go.

Signed-off-by: Dmytro Rashko <dimetron@me.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants