From 7b6e911502a6e0f825986015fc860d075d42b3a2 Mon Sep 17 00:00:00 2001 From: Patrick Ohly Date: Wed, 9 Nov 2022 19:42:32 +0100 Subject: [PATCH] dependencies: forbid problematic dependencies of CDI + runtime-tools github.com/container-orchestrated-devices/container-device-interface and github.com/opencontainers/runtime-tools depend on some problematic packages in code that isn't used by Kubernetes. Explicitly listing those dependencies ensures that they do not get pulled in accidentally. --- hack/unwanted-dependencies.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/hack/unwanted-dependencies.json b/hack/unwanted-dependencies.json index c9610a3f8a1..e3e0b4399fb 100644 --- a/hack/unwanted-dependencies.json +++ b/hack/unwanted-dependencies.json @@ -9,6 +9,8 @@ "github.com/go-openapi/strfmt": "use k8s.io/kube-openapi/pkg/validation/strfmt instead", "github.com/go-openapi/validate": "use k8s.io/kube-openapi/pkg/validation/validate instead", "github.com/hashicorp/consul": "MPL license not in CNCF allowlist", + "github.com/hashicorp/errwrap": "MPL license not in CNCF allowlist", + "github.com/hashicorp/go-multierror": "MPL license not in CNCF allowlist", "github.com/hashicorp/golang-lru": "MPL license not in CNCF allowlist", "github.com/hashicorp/hcl": "MPL license not in CNCF allowlist", "github.com/influxdata/influxdb1-client": "", @@ -17,7 +19,10 @@ "github.com/onsi/ginkgo": "Ginkgo has been migrated to V2, refer to #109111", "github.com/spf13/viper": "refer to #102598", "go.mongodb.org/mongo-driver": "", + "gopkg.in/fsnotify.v1": "obsolete, use github.com/fsnotify/fsnotify", "k8s.io/klog": "we have switched to klog v2, so avoid klog v1", + "github.com/mndrix/tap-go": "unmaintained", + "github.com/xeipuuv/gojsonschema": "unmaintained", "rsc.io/quote": "refer to #102833", "rsc.io/sampler": "refer to #102833" }