- Submitter:
- Eric Dorland
- Date:
- 2026-08-14 03:35:02 UTC
- Severity:
- normal
The package is several versions behind at this point.
Hello, 27th of April. I can see this package has only 2 direct consumers: ``` $ pkg=golang-github-oschwald-maxminddb-golang-v2-dev $ grep-dctrl -s Package -F Build-Depends $pkg /var/lib/apt/lists/*_Sources | sort -u Package: golang-github-oschwald-geoip2-golang-v2 Package: mmdbinspect ``` mmdbinspect is up-to-date in Debian (v2.0.0) and it's go.mod lists oschwald-maxminddb-golang-v2 at version 2.1.0. Do you know what version golang-github-oschwald-geoip2-golang-v2 uses in its go.mod? IMO there's no point bumping Go libraries to latest for the sake of it, we better wait until consumers require a newer version. Best, Arnaud
Hello, 27th of April. I can see this package has only 2 direct consumers: ``` $ pkg=golang-github-oschwald-maxminddb-golang-v2-dev $ grep-dctrl -s Package -F Build-Depends $pkg /var/lib/apt/lists/*_Sources | sort -u Package: golang-github-oschwald-geoip2-golang-v2 Package: mmdbinspect ``` mmdbinspect is up-to-date in Debian (v2.0.0) and it's go.mod lists oschwald-maxminddb-golang-v2 at version 2.1.0. Do you know what version golang-github-oschwald-geoip2-golang-v2 uses in its go.mod? IMO there's no point bumping Go libraries to latest for the sake of it, we better wait until consumers require a newer version. Best, Arnaud