"Minimum Virus": go.mod should support 1.2x without patch version, or 1.2x.0

[matthewhartstonge]

Hi Team,

I noticed that RenovateBot added a patch released that pushed minimum requirements of Go up to 1.22.11. This patch version was introduced via revonatebot https://github.com/googleapis/google-api-go-client/pull/2992/files due to googleapis/go-genproto#1185

This has ended up proliferating through the API SDKs and breaking CI/dependency upgrade builds.

Can the version requirement be relaxed to 1.22 to remain compatible with Go's version guarantees.

Environment details

• Programming language: Golang
• OS: macOS
• Language runtime version: latest

Steps to reproduce

1. update google.golang.org/api from 0.219.0 to 0.220.0

Version Request

• Would you please reduce the minimum Go version just as deps: Remove Go minor version from go.mods grpc/grpc-go#7831?
• Would you please drop the toolchain directive, unless it's necessary?

Related/Relevant Issues

• cmd/go: toolchain directive in go.mod being updated unnecessarily golang/go#65847
• "Minimum Virus": Please Support 1.22 Without Patch Version Requirement InfluxCommunity/influxdb3-go#133

[quartzmo]

Related to googleapis/google-cloud-go#11468.

[quartzmo]

@matthewhartstonge PTAL at PR #3011, which demonstrates a dependency issue that may be blocking us from making this fix. Would like to get your input, please comment on the PR.

[matthewhartstonge]

I've created a minimal repro: https://github.com/matthewhartstonge/exp-gomod-toolchain-resolution

But yeah, the issue does seem to be the otel upstream dep

edit: posted into the linked PR.

[quartzmo]

@matthewhartstonge Do you know why the minimum in this repo is 1.22.7, while the otel minimum is 1.22.0? If not, I'll try to investigate.

[matthewhartstonge]

yarp, essentially what you found in #3011 due to go: cloud.google.com/go/auth@v0.14.1 requires go@1.22.7, but 1.22 is requested

[quartzmo]

Renamed this issue to reflect the focus on "Would you please drop the toolchain directive, unless it's necessary?", above. The toolchain removal request is already covered by googleapis/google-cloud-go#11468.

[quartzmo]

Note that opentelemetry-go reduced its version to 1.22.0 in Release v1.34.0/v0.56.0/v0.10.0 open-telemetry/opentelemetry-go#6073