Hello,

On 14/08/2026 09:41, Eric Dorland wrote:
The package is several versions behind at this point.

But time-wise, it's only 3.5 months behind, 2.2.0 was released on the 27th of April.

I can see this package has only 2 direct consumers:

```
$ pkg=golang-github-oschwald-maxminddb-golang-v2-dev
$ grep-dctrl -s Package -F Build-Depends $pkg /var/lib/apt/lists/*_Sources | sort -u
Package: golang-github-oschwald-geoip2-golang-v2
Package: mmdbinspect
```

mmdbinspect is up-to-date in Debian (v2.0.0) and it's go.mod lists oschwald-maxminddb-golang-v2 at version 2.1.0. Do you know what version golang-github-oschwald-geoip2-golang-v2 uses in its go.mod?

IMO there's no point bumping Go libraries to latest for the sake of it, we better wait until consumers require a newer version.

Best,

Arnaud

Reply via email to