dex/Documentation/dev-dependencies.md

Managing dependencies

Go modules

Dex uses Go modules to manage its dependencies. Go 1.11 or higher is recommended. While Go 1.12 is expected to finalize the Go modules feature, with Go 1.11 you should activate the Go modules feature before interacting with Go modules.

Here is one way to activate the Go modules feature with Go 1.11.

export GO111MODULE=on  # manually active module mode

You should become familiar with module-aware go get as it can be used to add version-pinned dependencies out of band of the typical go mod tidy -v workflow.

Adding dependencies

To add a new dependency to dex or update an existing one:

1. Make changes to dex's source code importing the new dependency.
2. You have at least three options as to how to update go.mod to reflect the new dependency:

• Run go mod tidy -v. This is a good option if you do not wish to immediately pin to a specific Semantic Version or commit.
• Run, for example, go get <package-name>@<commit-hash>. This is a good option when you want to immediately pin to a specific Semantic Version or commit.
• Manually update go.mod. If one of the two options above doesn't suit you, do this -- but very carefully.

3. Create a git commit to reflect your code changes.