update Go

[davidspek]

Hi @kubeflow/wg-training-leads, While adding the script to generate the dependabot configuration I noticed that the go dependency files are not compatible. I'm guessing Go needs to be updated so that go.mod and go.sum are created rather than Gopkg.lock and Gopkg.toml. Once that is done, running make build-dependabot from the root of the repo will update the config and allow it to scan for go dependencies.

#30

[Jeffwan]

@davidspek Are you using chainer now? This repo is inactive and we would like to get more feedbacks from users and then determine what's the next step?

This probably needs more refactoring later if we still want to maintain it

[davidspek]

@Jeffwan I am not, I just went through all the repo's and added the script and resulting dependabot configuration so they can stay up to date with their dependencies easier and remove security vulnerabilities.
While I have no idea what chainer even is, I might (depends on time required and if I have it) try updating it so it doesn't fall behind too much while a decision is made regarding where it will go in the future.
Maybe this is an interesting question to add to the User Survey. Or more generally, what operators people use and what operators they might want to have added. For example, people from my department are interested in Dask and there is a Dask operator out there that I thought might be interesting to integrate into Kubeflow.
kubeflow/kubeflow#5539

[Jeffwan]

@davidspek Thanks. We may do some clean up on these repos. I think this repo is inactive and we can skip Dependabot for this one. I talked with few folks in Capital one in the past and they want to open source their internal dask operator at that time. It's been a while. If you org has plan to open source the one you attached, that would be great.

[davidspek]

@Jeffwan We aren’t using a Dask operator yet. But the one I linked to is on GitHub under the Apache 2 license :).