Skip to content

Conversation

confiks
Copy link
Contributor

@confiks confiks commented Jul 26, 2025

Allows dependabot to track updates to tool packages as well.

Copy link
Member

@gerardsn gerardsn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the idea of adding the tools to the dependencies since it makes managing tool versions a bit easier and more transparent to users. However, this adds ~650 lines to go.mod/go.sum and nearly doubles their sizes. One of the reasons oapi-codegen was split into a runtime and a generator repo was to remove this dependency bloat.

I consider the current list of dependencies (just go.mod) sort of manageable by hand in terms of deciding when/how to make changes. After this change the list will be too long for me to keep track of what everything is and what it is used for. But that is just an opinion and others may disagree / not care about this.

Copy link
Member

@reinkrul reinkrul left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I understand and somewhat share the concern of @gerardsn but I think the trade-off tips in favor of having one less tool to worry about.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants