switch govendor->dep

note: dep ensure adds a bunch of stuff that govendor used to filter out:
* test files
* main files
* non-go files
* root and sub packages when we only need 1 specific package in a tree
* other dependencies of root/sub packages that we didn't need in the
first place

but I then ran `dep prune` which cleans much of it up again

vendor updates:
package                          used by                     comments
vendor/github.com/golang/snappy  cmd/mt-replicator-via-tsdb
google/go-querystring            MT clustering               minor
github.com/hailocab/go-hostpool  cassandra
github.com/uber/jaeger-client-go tracing                     minor
gopkg.in/raintank/schema.v0      everything                  minor v1.5

Gopkg.toml

@@ -0,0 +1,164 @@
+# Gopkg.toml example
+#
+# Refer to https://github.com/golang/dep/blob/master/docs/Gopkg.toml.md
+# for detailed Gopkg.toml documentation.
+#
+# required = ["github.com/user/thing/cmd/thing"]
+# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
+#
+# [[constraint]]
+#   name = "github.com/user/project"
+#   version = "1.0.0"
+#
+# [[constraint]]
+#   name = "github.com/user/project2"
+#   branch = "dev"
+#   source = "github.com/myfork/project2"
+#
+# [[override]]
+#  name = "github.com/x/y"
+#  version = "2.4.0"
+
+
+[[constraint]]
+  name = "github.com/Dieterbe/artisanalhistogram"
+
+[[constraint]]
+  name = "github.com/Dieterbe/profiletrigger"
+
+[[constraint]]
+  name = "github.com/Shopify/sarama"
+  version = "1.10.1"
+
+[[constraint]]
+  name = "github.com/Sirupsen/logrus"
+  version = "0.7.3"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/alyu/configparser"
+
+[[constraint]]
+  name = "github.com/bitly/go-hostpool"
+
+[[constraint]]
+  name = "github.com/bsm/sarama-cluster"
+
+[[constraint]]
+  name = "github.com/davecgh/go-spew"
+  version = "1.1.0"
+
+[[constraint]]
+  name = "github.com/dgryski/go-linlog"
+
+[[constraint]]
+  name = "github.com/dgryski/go-tsz"
+
+[[constraint]]
+  name = "github.com/docker/docker"
+
+[[constraint]]
+  name = "github.com/go-macaron/binding"
+
+[[constraint]]
+  name = "github.com/gocql/gocql"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/golang/snappy"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/google/go-querystring"
+
+[[constraint]]
+  name = "github.com/graphite-ng/carbon-relay-ng"
+  version = "0.9.3"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/hailocab/go-hostpool"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/hashicorp/memberlist"
+
+[[constraint]]
+  name = "github.com/jpillora/backoff"
+
+[[constraint]]
+  name = "github.com/kisielk/og-rek"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/kisielk/whisper-go"
+
+[[constraint]]
+  name = "github.com/mattbaird/elastigo"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/metrics20/go-metrics20"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/mitchellh/go-homedir"
+
+[[constraint]]
+  name = "github.com/nsqio/go-nsq"
+
+[[constraint]]
+  name = "github.com/opentracing/opentracing-go"
+
+[[constraint]]
+  branch = "v2"
+  name = "github.com/raintank/dur"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/raintank/gziper"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/raintank/met"
+
+[[constraint]]
+  branch = "master"
+  name = "github.com/raintank/misc"
+
+[[constraint]]
+  name = "github.com/raintank/worldping-api"
+
+[[constraint]]
+  name = "github.com/rakyll/globalconf"
+
+[[constraint]]
+  name = "github.com/rs/cors"
+  version = "1.0.0"
+
+[[constraint]]
+  name = "github.com/sergi/go-diff"
+
+[[constraint]]
+  name = "github.com/smartystreets/goconvey"
+
+[[constraint]]
+  name = "github.com/syndtr/goleveldb"
+
+[[constraint]]
+  name = "github.com/tinylib/msgp"
+  version = "1.0.0-beta"
+
+[[constraint]]
+  name = "github.com/uber/jaeger-client-go"
+
+[[constraint]]
+  name = "gopkg.in/macaron.v1"
+  version = "1.1.8"
+
+[[constraint]]
+  name = "gopkg.in/raintank/schema.v0"
+  version = "0.0.1"
+
+[[constraint]]
+  name = "gopkg.in/raintank/schema.v1"

docs/development.md

@@ -1,5 +1,5 @@
 # Development
 
-* [govendor](https://github.com/kardianos/govendor) for managing vendored depedencies
+* [dep](https://github.com/golang/dep) for managing vendored depedencies
 * `go build` to build
 * [metrics2docs](https://github.com/Dieterbe/metrics2docs) generates the metrics documentation for the [metrics page](https://github.com/grafana/metrictank/blob/master/docs/metrics.md)

scripts/vendor_health.sh

@@ -1,20 +1,19 @@
 #!/bin/bash
 
-if ! which govendor >/dev/null; then
-	go get github.com/kardianos/govendor || exit 1
+if ! which dep >/dev/null; then
+	go get -u github.com/golang/dep/cmd/dep || exit 1
 fi
 
-ret=0
+dep version
 
-external=$(govendor list +external)
-missing=$(govendor list +missing)
-unused=$(govendor list +unused)
+# until we have https://docs.google.com/document/d/1j_Hka8eFKqWwGJWFSFedtBsNkFaRN3yvL4g8k30PLmg/edit#
+# this should do fine:
+# (note dep ensure -dry-run and dep ensure would add a whole bunch of packages to vendor, which dep prune deletes again, so we can't just check those)
+# we can expect this to change soon though: https://github.com/golang/dep/issues/944
 
-[ -n "$external" ] && ret=1 && echo -e "packages missing in vendor that are in gopath:\n$external\n"
-[ -n "$missing"  ] && ret=1 && echo -e "packages missing in vendor that are not found:\n$missing\n"
-[ -n "$unused"   ] && ret=1 && echo -e "unused vendored packages found:\n$unused\n"
+dep ensure -no-vendor -dry-run
+ret=$?
 
-echo govendor list: && govendor list
-echo -n "govendor version: " && govendor -version
+dep status
 
 exit $ret