From 13371337ae2e67270a442dcfe5ebd4ebfaf85bba Mon Sep 17 00:00:00 2001 From: Billy Lau Date: Tue, 22 Sep 2026 11:04:52 -0500 Subject: [PATCH] verifier_tools/verify: Require Go 1.25+ in README and upgrade x/mod to v0.40.0. Following the merge of PR#11, the module toolchain baseline was bumped to Go 1.25.0 in go.mod. We reflect this new requirement in the documentation and upgrade golang.org/x/mod to drop legacy indirect dependencies. verifier_tools/verify/README.md: - Update minimum required toolchain in the Build section from Go 1.24 to Go 1.25+. verifier_tools/verify/go.mod & go.sum: - Upgrade golang.org/x/mod from v0.5.1 to v0.40.0 (the latest release aligned with the Go 1.25 toolchain baseline). - Drop golang.org/x/crypto indirect dependency entirely, as modern releases of golang.org/x/mod/sumdb/note rely directly on the standard library's crypto/ed25519 package rather than golang.org/x/crypto/ed25519. Test: - go build ./cmd/verifier/... - ./verifier --help - go vet ./... - go test -v ./... (all tests in internal/checkpoint and internal/tiles passing) Change-Id: I60f45c347114b3533548fbe6ca713b3118dd2ea9 --- verifier_tools/verify/README.md | 2 +- verifier_tools/verify/go.mod | 4 +--- verifier_tools/verify/go.sum | 6 ++---- 3 files changed, 4 insertions(+), 8 deletions(-) diff --git a/verifier_tools/verify/README.md b/verifier_tools/verify/README.md index 3b2a171..ebc40e4 100644 --- a/verifier_tools/verify/README.md +++ b/verifier_tools/verify/README.md @@ -19,7 +19,7 @@ See the particular section for this tool: * Internal libraries for the verifier binary. ## Build -This module requires Go 1.24. Install [here](https://go.dev/doc/install), and run `go build cmd/verifier/verifier.go`. +This module requires Go 1.25+. Install [here](https://go.dev/doc/install), and run `go build cmd/verifier/verifier.go`. An executable named `verifier` should be produced upon successful build. diff --git a/verifier_tools/verify/go.mod b/verifier_tools/verify/go.mod index 27ea7a0..56da97d 100644 --- a/verifier_tools/verify/go.mod +++ b/verifier_tools/verify/go.mod @@ -4,7 +4,5 @@ go 1.25.0 require ( github.com/google/go-cmp v0.5.7 - golang.org/x/mod v0.5.1 + golang.org/x/mod v0.40.0 ) - -require golang.org/x/crypto v0.52.0 // indirect diff --git a/verifier_tools/verify/go.sum b/verifier_tools/verify/go.sum index 96113f6..cc0ec51 100644 --- a/verifier_tools/verify/go.sum +++ b/verifier_tools/verify/go.sum @@ -1,8 +1,6 @@ github.com/google/go-cmp v0.5.7 h1:81/ik6ipDQS2aGcBfIN5dHDB36BwrStyeAQquSYCV4o= github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE= -golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= -golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= -golang.org/x/mod v0.5.1 h1:OJxoQ/rynoF0dcCdI7cLPktw/hR2cueqYfjm43oqK38= -golang.org/x/mod v0.5.1/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro= +golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= +golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=