feat: go mod validator repo sha exceptions by erikburt · Pull Request #1562 · smartcontractkit/.github

erikburt · 2026-05-26T17:15:59Z

Adds repo-sha-exceptions for one-off exceptions to go mod validation. This has arised more than once, and will allow us to allow-list specific SHAs instead of long-lived branches for one-off exceptions.

Changes

Adds repo-sha-exceptions input
Short-circuit logic for sha exceptions
Some unit tests

Testing

Tested using this PR: smartcontractkit/chainlink#22528

Which references a commit on a non-trunk branch: Revert "feat: migrate TXM and AptosService config to duration types (… chainlink-aptos#471

Before (no exception):

Found 7 invalid dependencies.
::error file=/Users/erik/Documents/repos/chainlink/core/scripts/go.mod::[/Users/erik/Documents/repos/chainlink/core/scripts/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 // indirect not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/deployment/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/deployment/go.mod,line=39::[/Users/erik/Documents/repos/chainlink/deployment/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/go.mod,line=81::[/Users/erik/Documents/repos/chainlink/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/integration-tests/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/integration-tests/go.mod,line=27::[/Users/erik/Documents/repos/chainlink/integration-tests/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/integration-tests/load/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/integration-tests/load/go.mod,line=18::[/Users/erik/Documents/repos/chainlink/integration-tests/load/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/system-tests/lib/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/system-tests/lib/go.mod,line=34::[/Users/erik/Documents/repos/chainlink/system-tests/lib/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::debug::Finding line number for github.com/smartcontractkit/chainlink-aptos in /Users/erik/Documents/repos/chainlink/system-tests/tests/go.mod. (github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46)
::error file=/Users/erik/Documents/repos/chainlink/system-tests/tests/go.mod,line=599::[/Users/erik/Documents/repos/chainlink/system-tests/tests/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 not found in (develop).%0AVersion(commit): c2a8d09e5b46%0ATree: https://github.com/smartcontractkit/chainlink-aptos/tree/c2a8d09e5b46%0ACommit: https://github.com/smartcontractkit/chainlink-aptos/commit/c2a8d09e5b46 
::error::validation failed for 7 dependencies

After (with exception):

Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/core/scripts/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 // indirect allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/deployment/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/integration-tests/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/integration-tests/load/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/system-tests/lib/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
Validating dependency: smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46
::debug::SHA exceptions for smartcontractkit/chainlink-aptos: c2a8d09e5b46c1c7815700f645a50caf8a466bda
[/Users/erik/Documents/repos/chainlink/system-tests/tests/go.mod] dependency github.com/smartcontractkit/chainlink-aptos@v0.0.0-20260518211324-c2a8d09e5b46 allowed by SHA exception (matched: c2a8d09e5b46c1c7815700f645a50caf8a466bda)
validation successful for all go.mod dependencies

erikburt added 3 commits May 26, 2026 10:11

feat: go-mod-validation repo sha exceptions

2e409c8

add changeset

887dcaf

docs

10100ca

erikburt self-assigned this May 26, 2026

erikburt changed the title ~~Feat/go mod validator sha exceptions~~ feat: go mod validator repo sha exceptions May 26, 2026

erikburt marked this pull request as ready for review May 26, 2026 17:19

erikburt requested a review from a team as a code owner May 26, 2026 17:19

product-security-plaid-production Bot requested a review from kalverra May 26, 2026 17:19

kdihalas approved these changes May 26, 2026

View reviewed changes

kalverra approved these changes May 26, 2026

View reviewed changes

erikburt merged commit 6eb2050 into main May 26, 2026
18 checks passed

erikburt deleted the feat/go-mod-validator-sha-exceptions branch May 26, 2026 18:21

app-token-issuer-releng-renovate Bot mentioned this pull request May 26, 2026

Version Packages #1563

Merged

erikburt mentioned this pull request May 26, 2026

chore: go mod validation add sha exception smartcontractkit/gha-org-workflows#31

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: go mod validator repo sha exceptions#1562

feat: go mod validator repo sha exceptions#1562
erikburt merged 3 commits into
mainfrom
feat/go-mod-validator-sha-exceptions

erikburt commented May 26, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

erikburt commented May 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Testing

Before (no exception):

After (with exception):

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

erikburt commented May 26, 2026 •

edited

Loading