Dependabot-core: vgo support

[jbreitbart]

As a followup to #449. vgo support would also be great once it gets widely adopted.

Thanks for the dep support 😄, just opening this now to be able to get notified once vgo is also available.

[homme]

The recently released Go 1.11 includes support as an experimental opt in feature. It would be great if this could be supported by dependabot to help in the migration to and experimentation with go modules.

[greysteil]

We're working on it! @hmarr has it on a branch locally, and we should have something for you in the next week or so. 😎

[greysteil]

This just landed, thanks to @hmarr's work on it! You can now add Go projects that use a go.mod file from the Dependabot dashboard, and Dependabot will monitor and update them.

Some caveats:

• it won't update your go.sum
• it will attempt to update you between major versions, which may not be the right behaviour
• it doesn't know how to handle git commit pins yet. If you have a repo that uses them please give Dependabot a try on it so that I can use the resulting errors to fix support(!)

If you have repos you can add it to then I'd very much appreciate the beta testing.

I'm going to close this issue, but feel free to continue to post any vgo-related feedback here until we get it stable.