Pull request overview

This PR aims to improve the Golang autodiscovery pipeline generation so that modules pinned to Go pseudo-versions don’t break version filtering and can still be updated correctly.

Changes:

• Added pseudo-version detection via isPseudoVersion (regex-based).
• Updated Golang dependency autodiscovery to override the version filter when a pseudo-version is detected.
• Extended autodiscovery tests to cover pseudo-version scenarios.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 6 comments.

pkg/plugins/autodiscovery/golang/dependency.go:178

• Same as above for replace modules: kind is switched to latest but pattern is set to "". With kind: latest, the filter logic expects pattern: latest; otherwise it can fail to resolve a version when the proxy returns a list. Set the pattern to latest (or use a semver "latest" pattern) to avoid producing non-functional manifests for replaced modules.

				goModuleVersionPattern := g.versionFilter.Pattern
				goModuleVersionKind := g.versionFilter.Kind
				switch isPseudoVersion(replace.NewVersion) {
				case false:
					goModuleVersionPattern, err = g.versionFilter.GreaterThanPattern(replace.NewVersion)
					if err != nil {
						logrus.Debugf("skipping golang module %q due to: %s", replace.NewPath, err)
						continue
					}

				case true:
					// If the new version is a pseudo-version,
					// we cannot apply a version filter pattern as
					// golang registry will only return one version for this module.

					logrus.Debugf("Module %q uses a pseudo-version %q, so ignoring version filter for this module as the registry will only return one version", replace.NewPath, replace.NewVersion)

					goModuleVersionKind = "latest"
					goModuleVersionPattern = ""
				}

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.