update dependencies

[mavimo]

SSIA

k8s start to support go.mod in release v1.17, see:

• Tag k8s.io repos with semver-like tags kubernetes/kubernetes#84608
• staging: figure out vgo (versioned go) publishing strategy kubernetes/kubernetes#63607
• Update published modules with v0.x.y tags kubernetes/enhancements#1350

[mholt]

Can you help me understand why these are necessary? I looked at the linked issues but there's a lot going on in those 😅

[mavimo]

@mholt do you mean the replace section? Since K8s is moving from an outdated dependency system to go mod and they are using a single repo (that should have a single tag) but at the same time they chose to use a 0.x.y version of go mods (see kubernetes/kubernetes#84608 (comment) ) we need to explain dependencies that are reported as v0.0.0 in the kubernetes/kubernetes repo (since at the moment the reference are not updated for each release).

I don't have a background that allow me to go deep on explanation, you can find a lot of info on SIG-ARCHITECTURE https://github.com/kubernetes/enhancements/blob/master/keps/sig-architecture/2019-03-19-go-modules.md

Other project follow the same approach (see -for example- https://github.com/kubernetes/ingress-nginx/blob/master/go.mod#L58-L81 )

[mholt]

Huh... that is really unusual. So this is a temporary thing, it sounds like?

[mavimo]

@mholt I hope too, but sincerely I have no idea on schedule / improvement for next releases on this side...

[mholt]

Great, thanks! This is exactly what needed to happen next, so I'm glad you were able to help with it!