TFA mentions reproducible builds, but doesn’t mention how gb solves these. I’m particularly wondering how gb handles dependency versioning. Anyone know?
I wonder if it would be easy to use gpm with gb. gpm to fetch deps at a given version, and gb to do the building.
The best I can tell… it doesn’t actually do the version bits yet.. Seems it does a git clone of a given vendor’d dep into the vendor directory of a given project.. then you checkout the version you want? By default it does master.. so I am not sure what this currently gets you over go get
Correct, gb doesn’t do any of the version bits. Read Dave Cheney’s explanation.