Dependency issue with bufbuild/protovalidate-go

[lukasbindreiter]

Hi,

Our go package has a dependency on github.com/bufbuild/buf (we are using it in a tools.go and haven't upgraded to the new go tools yet) - which means we also upgrade it from time to time with our other dependencies, most of the time using a simple go get -u ./...

For a while now however this always fails and results in a depdency conflict.

The error message looks like this:

go: finding module for package github.com/bufbuild/protovalidate-go/resolver
go: finding module for package github.com/bufbuild/protovalidate-go/celext
go: github.com/tilebox/tilebox-go imports
        github.com/bufbuild/buf/cmd/buf imports
        github.com/bufbuild/buf/private/buf/cmd/buf imports
        github.com/bufbuild/buf/private/buf/cmd/buf/command/beta/bufpluginv1 imports
        github.com/bufbuild/buf/private/bufpkg/bufcheck/bufcheckserver imports
        github.com/bufbuild/buf/private/bufpkg/bufcheck/bufcheckserver/internal/bufcheckserverbuild imports
        github.com/bufbuild/buf/private/bufpkg/bufcheck/bufcheckserver/internal/bufcheckserverhandle imports
        github.com/bufbuild/buf/private/bufpkg/bufcheck/bufcheckserver/internal/buflintvalidate imports
        github.com/bufbuild/protovalidate-go/celext: module github.com/bufbuild/protovalidate-go@latest found (v0.9.2), but does not contain package github.com/bufbuild/protovalidate-go/celext

It's related to the resolver package here: https://github.com/bufbuild/protovalidate-go being renamed to resolve. It is still used though using the old name: https://github.com/bufbuild/buf/blob/main/private/bufpkg/bufcheck/bufcheckserver/internal/buflintvalidate/buflintvalidate.go#L21

So if go tries to upgrade both bufbuild/buf and protovalidate-go to the latest version, it will fail.

Would it be possible to update the import in buflintvalidate in an upcoming release, such that auto upgrade works again? Would be greatly appreciated!

[emcfarlane]

Hello, this is being looked into in #3652 , though the method of installation is not a supported type. See the list of supported installs here.