Request to release 3.18.1 about goose

[mfridman]

Sure, I'll do it tonight 👍

[mfridman]

Thinking about this more. This dependency isn't even part of the core goose library, and only used for integration tests.

I wonder if I can reshuffle things to cleanup go.mod so this doesn't happen again.

I've seen a lot of CVE due to this dependency across multiple Go projects.

[mfridman]

To resolve your immediate issue, I tagged https://github.com/pressly/goose/releases/tag/v3.19.1.

Going to close those for now, and continue to refactor the integration tests separately.

[mfridman]

Thinking about this more. This dependency isn't even part of the core goose library, and only used for integration tests.

I wonder if I can reshuffle things to cleanup go.mod so this doesn't happen again.

For brevity, I ended up ripping out the docker-related bits and shoving them into a separate Go module. I think this turned out a lot cleaner for both consumers and maintainers.

#713