Skip to content

Conversation

silverwind
Copy link
Member

This generation complicates go dependency updates and inhibts the use of tools like dependabot or renovate which (as far as I'm aware) can not run post-upgrade steps. Also, google/go-licenses has bugs which make it exit with errors, I think it's a bad fit.

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Sep 19, 2025
@github-actions github-actions bot added modifies/go Pull requests that update Go code modifies/templates This PR modifies the template files modifies/internal modifies/dependencies modifies/frontend labels Sep 19, 2025
@a1012112796
Copy link
Member

maybe the licenses.txt can be moved to docs.gitea.com

@silverwind
Copy link
Member Author

maybe the licenses.txt can be moved to docs.gitea.com

No, it has to update every time dependencies change, and they change far too often.

The only alternative I consider is moving the generation completely to build-time, likely using a better tool than go-license, like trivy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. modifies/dependencies modifies/frontend modifies/go Pull requests that update Go code modifies/internal modifies/templates This PR modifies the template files
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants