Add new makefile targets for go mod verification

.github/workflows/ci-go.yml

@@ -37,8 +37,7 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
     - run: |
-        go mod vendor
-        go mod tidy -compat=1.20
+        make go-verify
         hack/ci-utils/isClean.sh
 
   generate-check:

Makefile

@@ -18,6 +18,9 @@ GATEKEEPER_VERSION = v3.10.0
 GATEKEEPER_IMAGE ?= ${RP_IMAGE_ACR}.azurecr.io/gatekeeper:$(GATEKEEPER_VERSION)
 GOTESTSUM = gotest.tools/[email protected]
 
+# Golang version go mod tidy compatibility
+GOLANG_VERSION ?= 1.20
+
 ifneq ($(shell uname -s),Darwin)
     export CGO_CFLAGS=-Dgpgme_off_t=off_t
 endif
@@ -266,9 +269,22 @@ admin.kubeconfig:
 aks.kubeconfig:
 	hack/get-admin-aks-kubeconfig.sh
 
+.PHONY: go-tidy
+go-tidy: # Run go mod tidy - add missing and remove unused modules.
+	go mod tidy -compat=${GOLANG_VERSION}
+
+.PHONY: go-vendor
+go-vendor:  # Run go mod vendor - make vendored copy of dependencies.
+	go mod vendor
+
+.PHONY: go-verify
+go-verify: go-tidy go-vendor # Run go mod verify - verify dependencies have expected content
+	go mod verify
+
 vendor:
 	# See comments in the script for background on why we need it
 	hack/update-go-module-dependencies.sh
+	$(MAKE) go-verify
 
 install-go-tools:
 	go install ${GOTESTSUM}

docs/updating-dependencies.md

@@ -21,8 +21,7 @@ The reason for calling script instead of directly calling:
 
 ```bash
 go get -u ./...
-go mod tidy -compat=1.20
-go mod vendor
+make go-verify
 ```
 
 is that packages modified in this script do not fully support modules and
@@ -43,8 +42,7 @@ the PR, one can simply call
 go get <module>@<release> OR
 go get -u <module>@<release>
 
-go mod tidy -compat=1.20
-go mod vendor
+make go-verify
 ```
 
 ---

hack/update-go-module-dependencies.sh

@@ -40,6 +40,3 @@ for x in vendor/github.com/openshift/*; do
 done
 
 go get -u ./...
-
-go mod tidy -compat=1.20
-go mod vendor