mod: update new direct dependency via go mod tidy
What changed, and why it matters
This commit is a routine Go module housekeeping change. It removes the '// indirect' label from a tiny helper library (go-difflib) so Go recognizes it as a direct dependency. There is no code change, no bug fix, and no security-relevant behavior change visible in the diff.
No action required. Treat as normal dependency metadata maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The only change is in go.mod: github.com/pmezard/go-difflib v1.0.0 is changed from indirect to direct (the version is unchanged). This typically happens when ‘go mod tidy’ notices an import in the main module that was previously pulled in only as a transitive dependency. The package itself is a small diffing utility commonly used by test assertion libraries. No source files, build logic, or runtime behavior of lnd are modified.
Changed components
go.mod dependency metadataInspect captured patch +1 / −1
diff --git a/go.mod b/go.mod
index 67c1570..7645bf6 100644
--- a/go.mod
+++ b/go.mod
@@ -141,7 +141,7 @@ require (
github.com/opencontainers/runc v1.1.14 // indirect
github.com/ory/dockertest/v3 v3.10.0 // indirect
github.com/pkg/errors v0.9.1 // indirect
- github.com/pmezard/go-difflib v1.0.0 // indirect
+ github.com/pmezard/go-difflib v1.0.0
github.com/prometheus/client_model v0.2.0 // indirect
github.com/prometheus/common v0.26.0 // indirect
github.com/prometheus/procfs v0.6.0 // indirect
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.