Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

nats is using a retracted dependency making use of the latest nats server impossible as a dependency for other projects #1284

Closed
karlmutch opened this issue Jan 27, 2023 · 1 comment · Fixed by #1285
Closed

nats is using a retracted dependency making use of the latest nats server impossible as a dependency for other projects #1284

karlmutch opened this issue Jan 27, 2023 · 1 comment · Fixed by #1285

Comments

@karlmutch
Copy link

karlmutch commented Jan 27, 2023 •
edited
Loading

The most recent nats server is using a retracted version of the github.com/hashicorp/go-msgpack package (v1.1.5).

This makes using nats as a package dependency in other software impossible.

go: warning: github.com/hashicorp/go-msgpack@v1.1.5: retracted by module author: v1.1.5 merged upstream ugorji/go which breaks compatibility with previous versions.
go: to switch to the latest unretracted version, run:
        go get github.com/hashicorp/go-msgpack@latest
go: upgraded github.com/hashicorp/go-msgpack v0.5.5 => v1.1.5
go: upgraded github.com/nats-io/nats-streaming-server v0.18.0 => v0.25.3```

Unfortunately it is not possible to log an issue on the hashicorp fork for that project and the retracted package only has a major version after the retracted version.
@karlmutch karlmutch changed the title nats is using a revoked dependency making use of the latest nats server impossible as a dependency for other projects nats is using a retarcted dependency making use of the latest nats server impossible as a dependency for other projects Jan 27, 2023
@karlmutch karlmutch changed the title nats is using a retarcted dependency making use of the latest nats server impossible as a dependency for other projects nats is using a retracted dependency making use of the latest nats server impossible as a dependency for other projects Jan 27, 2023
kozlovic added a commit that referenced this issue Jan 27, 2023
@kozlovic
[UPDATED] github.com/hashicorp/go-msgpack v1.1.5 to v2.1.0
5c04e4e 
The v1.1.5 has been retracted. Updated our reference to go-msgpack
to use the `/v2` and go mod to the latest v2.1.0.

Resolves #1284

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
@kozlovic kozlovic mentioned this issue Jan 27, 2023
Merged
@kozlovic
Copy link
Member

@karlmutch I had made a change in PR #1285 and wonder if you had a chance to test/check that this addresses the issue? I could do a release v0.25.4 in a short turn around if need be.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[UPDATED] github.com/hashicorp/go-msgpack v1.1.5 to v2.1.0 nats-io/nats-streaming-server
2 participants
@karlmutch @kozlovic