git: 6d5b8fde29ae - main - Uses/go.mk: Remove ca_root_nss from FETCH_DEPENDS

The branch main has been updated by adamw:

URL: https://cgit.FreeBSD.org/ports/commit/?id=6d5b8fde29aeea4278bfc8d1f27b5016fcdf9ccb

commit 6d5b8fde29aeea4278bfc8d1f27b5016fcdf9ccb
Author:     Siva Mahadevan <me@svmhdvn.name>
AuthorDate: 2025-05-28 16:07:23 +0000
Commit:     Adam Weinberger <adamw@FreeBSD.org>
CommitDate: 2025-05-28 16:19:30 +0000

    Uses/go.mk: Remove ca_root_nss from FETCH_DEPENDS
    
    Once upon a time (i.e. last I looked at it), Go knew how to look at
    the cert.pem installed by ca_root_nss, and that's it. Over the last
    couple years, Go learned how to look at the system CA store, making
    ca_root_nss completely unnecessary.
    
    Assuming that our cert store is equivalent to NSS's cert.pem, there
    should be no functional change here. If you install ca_root_nss, Go
    will use it.
    
    All we're changing here is that Go used to have a FETCH_DEPENDS on
    ca_root_nss for fetching package files and such, but now we're just
    relying on the system CA store. This has no effect on the built
    product in any way.
    
    PR:             285611
    Reviewed by:    michaelo
---
 Mk/Uses/go.mk | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Mk/Uses/go.mk b/Mk/Uses/go.mk
index 5b1e8758417f..f56114da9973 100644
--- a/Mk/Uses/go.mk
+++ b/Mk/Uses/go.mk
@@ -186,8 +186,7 @@ WRKSRC=		${WRKDIR}/${GO_MODNAME}@${GO_MODVERSION}
 .      endif
 EXTRACT_ONLY?=	${DISTFILES:N*.mod\:*:N*.mod:C/:.*//}
 DIST_SUBDIR=	go/${PKGORIGIN:S,/,_,g}/${DISTNAME}
-FETCH_DEPENDS+=	${GO_CMD}:${GO_PORT} \
-		ca_root_nss>0:security/ca_root_nss
+FETCH_DEPENDS+=	${GO_CMD}:${GO_PORT}
 USES+=		zip
 .    else
 GO_ENV+=	GO_NO_VENDOR_CHECKS=1