go.mod: add temporary replace directive for kvdb
What the developer wrote
Authored by Boris Nagaev
go.mod: add temporary replace directive for kvdb
Add a local replace directive for kvdb so the main module can reference
the local kvdb changes (pgx/v5 migration) before a new kvdb version is
released.
What changed, and why it matters
This commit only adds a temporary Go module 'replace' directive so that the main lnd project uses a local copy of the kvdb package instead of a released version. It is a build/packaging convenience change with no security relevance visible in the diff or commit message.
No security action needed. Treat as normal development housekeeping; ensure the temporary replace directive is removed once the upstream kvdb release is available.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds one line to go.mod: replace github.com/lightningnetwork/lnd/kvdb => ./kvdb. This redirects the kvdb dependency to the local subdirectory during development until a new kvdb release containing a pgx/v5 migration is published. No code behavior changes are introduced.
Changed components
go.mod dependency resolutionInspect captured patch +3 / −0
diff --git a/go.mod b/go.mod
index 23a00ab..9c8aaad 100644
--- a/go.mod
+++ b/go.mod
@@ -210,6 +210,9 @@ replace github.com/lightningnetwork/lnd/queue => ./queue
// TODO(elle): remove once the gossip V2 sqldb changes have been made.
replace github.com/lightningnetwork/lnd/sqldb => ./sqldb
+// TODO: remove once kvdb with pgx/v5 is released.
+replace github.com/lightningnetwork/lnd/kvdb => ./kvdb
+
// This replace is for https://github.com/advisories/GHSA-25xm-hr59-7c27
replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.11
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.