go recently received a security upgrade to 1.12.8 (f4894bf9) this
upgrade fixes various CVEs in go standard libraries, for instance in
HTTP/2 functionality. Since go is statically linked packages using this
functionality need to be rebuild.
go-tools was removed in 11c5f257c5. It is
unclear to me why gogs depended on go-tools in the first place. The
build passes without go-tools so I guess it's fine to remove it.
Most of these updates is based on data from https://repology.org/,
detection based on permanent redirect from http:// to https://.
$source urls are updated when they contain $url as substring.
