From 64ea1adb04991dbac39c1272f39bf1f595a4d5a0 Mon Sep 17 00:00:00 2001 From: witchard Date: Tue, 22 Sep 2020 06:33:40 +0100 Subject: [PATCH 1/2] cmd/go/internal/get: add -insecure deprecation to release notes Updates #37519. --- doc/go1.16.html | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/go1.16.html b/doc/go1.16.html index 0167030ef8c668..11faef11f3ed5a 100644 --- a/doc/go1.16.html +++ b/doc/go1.16.html @@ -74,6 +74,15 @@

Go command

that is still considered to be a passing test.

+

+ The go get -insecure flag is deprecated and will be removed + in a future version. The GOINSECURE environment variable is + usually a better alternative, since it provides control over which modules + may be retrieved using an insecure scheme. It should be noted that the + -insecure flag also turns the module checksum validation off. + GOINSECUREdoes not do that, use GONOSUMDB. +

+

The all pattern

From deda4c858b5c5582fa63ae7f1eee5f57292670c4 Mon Sep 17 00:00:00 2001 From: witchard Date: Tue, 22 Sep 2020 19:01:13 +0100 Subject: [PATCH 2/2] Reword following review. --- doc/go1.16.html | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/doc/go1.16.html b/doc/go1.16.html index 11faef11f3ed5a..3c4d2f3059fdf7 100644 --- a/doc/go1.16.html +++ b/doc/go1.16.html @@ -75,12 +75,13 @@

Go command

- The go get -insecure flag is deprecated and will be removed - in a future version. The GOINSECURE environment variable is - usually a better alternative, since it provides control over which modules - may be retrieved using an insecure scheme. It should be noted that the - -insecure flag also turns the module checksum validation off. - GOINSECUREdoes not do that, use GONOSUMDB. + The go get -insecure flag is + deprecated and will be removed in a future version. The GOINSECURE + environment variable should be used instead, since it provides control + over which modules may be retrieved using an insecure scheme. Unlike the + -insecure flag, GOINSECURE does not disable module + sum validation using the checksum database. The GOPRIVATE or + GONOSUMDB environment variables may be used instead.

The all pattern