[bug] "module declares its path as: dario.cat/mergo but was required as: github.com/imdario/mergo"

[mathieu-benoit]

Dependabot is complaining about:

Dependabot wasn't able to update downloading
The module path downloading found in your go.mod doesn't match the actual path dario.cat/mergo found in the dependency's go.mod.

Updating the module path in your go.mod to dario.cat/mergo should resolve this issue.

See here: https://github.com/score-spec/score-compose/network/updates/22034673/jobs.

Same as if we run the go get -u all command:

go: github.com/imdario/[email protected] (matching all@upgrade) requires github.com/imdario/[email protected]: parsing go.mod:
        module declares its path as: dario.cat/mergo
                but was required as: github.com/imdario/mergo

Same as score-spec/score-k8s#49.

It's apparently related to this issue https://github.com/darccio/mergo/tree/v1.0.1?tab=readme-ov-file#100, darccio/mergo#248, but maybe not resolved yet?

Note: it's not impacting the current version/release, but it's avoiding upgrading all the go dependencies, so definitely something to resolve.