Using Go modules for dependency management.

Author: RichardKnop

.travis.yml

@@ -10,7 +10,6 @@ services:
 
 install:
   - go get -u github.com/golang/lint/golint
-  - go get -u github.com/FiloSottile/vendorcheck
   # Install gometalinter and certain linters
   - go get -u github.com/alecthomas/gometalinter
   - go get -u github.com/client9/misspell/cmd/misspell

Dockerfile.test

@@ -14,5 +14,8 @@ WORKDIR /go/src/github.com/RichardKnop/go-oauth2-server
 # Copy the local package files to the container's workspace.
 ADD . /go/src/github.com/RichardKnop/go-oauth2-server
 
+# Set GO111MODULE=on variable to activate module support
+ENV GO111MODULE on
+
 # Run integration tests as default command
 CMD make test-with-coverage

Gopkg.lock

@@ -8,7 +8,7 @@ fmt:
 	done;
 
 lint:
-	gometalinter --exclude=vendor/ --tests --config=gometalinter.json --disable-all --deadline=120s -E vet -E gofmt -E misspell -E ineffassign -E goimports -E deadcode ./...
+	gometalinter --tests --disable-all --deadline=120s -E vet -E gofmt -E misspell -E ineffassign -E goimports -E deadcode ./...
 
 golint:
 	for pkg in ${PACKAGES}; do \

Gopkg.toml

@@ -426,13 +426,9 @@ However, because the session service can be replaced via a plugin, any of the av
 
 ## Dependencies
 
-According to [Go 1.5 Vendor experiment](https://docs.google.com/document/d/1Bz5-UB7g2uPBdOx-rw5t9MxJwkfpx90cqG9AFL0JAYo), all dependencies are stored in the vendor directory. This approach is called `vendoring` and is the best practice for Go projects to lock versions of dependencies in order to achieve reproducible builds.
+Since Go 1.11, a new recommended dependency management system is via [modules](https://github.com/golang/go/wiki/Modules).
 
-This project uses [dep](https://github.com/golang/dep) for dependency management. To update dependencies during development:
-
-```sh
-dep ensure
-```
+This is one of slight weaknesses of Go as dependency management is not a solved problem. Previously Go was officially recommending to use the [dep tool](https://github.com/golang/dep) but that has been abandoned now in favor of modules.
 
 ## Setup
 

Makefile

@@ -6,6 +6,7 @@ import (
 
 	"github.com/RichardKnop/go-oauth2-server/config"
 	"github.com/jinzhu/gorm"
+
 	// Drivers
 	_ "github.com/lib/pq"
 )