Skip to content

deprecated packages migration - #5179

Merged
chavakula merged 13 commits into
develop/6from
chore/deprecated-packages-migration
Sep 4, 2026
Merged

chavakula merged 13 commits into
develop/6from
chore/deprecated-packages-migration

Conversation

@sourabhpatel-sumo

Copy link
Copy Markdown

What is this change?

Removed

  • github.com/willf/pad — replaced with inline padRight using strings.Repeat + unicode/utf8
  • github.com/ghodss/yaml — replaced with sigs.k8s.io/yaml
  • gopkg.in/yaml.v2 — replaced with gopkg.in/yaml.v3
  • github.com/mitchellh/go-homedir — replaced with stdlib os

Upgraded / Replaced

  • github.com/atlassian/gostatsd — 2018 pseudo-version → v41.1.6
  • github.com/graph-gophers/dataloader v1 → v7.2.0 (generics rewrite)
  • github.com/mitchellh/hashstructure → github.com/gohugoio/hashstructure v1.0.0
  • github.com/mitchellh/mapstructure → github.com/go-viper/mapstructure/v2 v2.5.0

How did you verify this change?

Ran full unit test suite and for manual e2e testing on local environment

Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
github.com/go-viper/mapstructure.

mitchellh/mapstructure was archived by author on Jul 23, 2024 and no
longer maintained.

This migration also fixes potential GHSA-fv92-fjc5-jj9h by shifting
indirect import of go-viper/mapstructure to direct with latest version

Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
github.com/gohugoio/hashstructure

Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Upgraded from the 2018 pre-release (v0.0.0-20180514010436) to the latest
tagged release (41.1.6, pseudo-version
v0.0.0-20260727064636-3f8f762e40df).

Drops four indirect deps pulled in by the old pre-release:
gxed/GoEndian, gxed/eventfd, jbenet/go-reuseport, libp2p/go-sockaddr

Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
this also removes unmaintained transitive dependency
opentracing/opentracing-go

Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
Signed-off-by: Sourabh Patel <sourabh.patel.ctr@sumologic.com>
@chavakula
chavakula merged commit cc57755 into develop/6 Sep 4, 2026
59 of 60 checks passed
@chavakula
chavakula deleted the chore/deprecated-packages-migration branch September 4, 2026 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security technical-debt

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants