ensure: Make -no-vendor combined with -dry-run fail when Gopkg.lock is outdated

CHANGELOG.md

@@ -27,6 +27,8 @@ IMPROVEMENTS:
 Improving performance when updating dependencies with `-update`. (#1175)
 * `dep status` now concurrently fetches repo info. Improving status performance.
 (#1135)
+* `dep ensure -no-vendor -dry-run` now exits with an error when changes would
+have to be made to `Gopkg.lock`. This is useful for CI. (#1256)
 * gps: Add SourceURLsForPath() to SourceManager. (#1166)
 * gps: Include output in error. (#1180)
 

cmd/dep/ensure.go

@@ -110,6 +110,12 @@ dep ensure -update -no-vendor
 
     As above, but only modify Gopkg.lock; leave vendor/ unchanged.
 
+dep ensure -no-vendor -dry-run
+
+    This fails with a non zero exit code if Gopkg.lock is not up to date with
+    the Gopkg.toml or the project imports. It can be useful to run this during
+    CI to check if Gopkg.lock is up to date.
+
 `
 
 var (
@@ -267,6 +273,10 @@ func (cmd *ensureCommand) runDefault(ctx *dep.Ctx, args []string, p *dep.Project
 		return errors.WithMessage(sw.Write(p.AbsRoot, sm, true, logger), "grouped write of manifest, lock and vendor")
 	}
 
+	if cmd.noVendor && cmd.dryRun {
+		return errors.New("Gopkg.lock was not up to date")
+	}
+
 	solution, err := solver.Solve()
 	if err != nil {
 		handleAllTheFailuresOfTheWorld(err)