Dep Version

v0.3.0, darwin-amd64 - Downloaded from GitHub releases page

What dep command did you run?

$ dep ensure

What did you expect to see?

A lock file that reflected the contents of the toml file.

What did you see instead?

A lock file that did not respect the contents of the toml file. What happened was I had the following constraints in the toml file:

[[constraint]]
  name = "gopkg.in/yaml.v1"
  source = "https://github.com/akutz/yaml.git"
  revision = "bc35f417f8a7664a73d46c9def2933417c03019f"
[[constraint]]
  name = "gopkg.in/yaml.v2"
  source = "https://github.com/akutz/yaml.git"
  revision = "bc35f417f8a7664a73d46c9def2933417c03019f"

But in the lock file only the yaml.v1 package was using my fork as its source. The yaml.v2 package was pointing to its primary repo.

It appears dep does not tolerate multiple packages with the same source.