From 07f640b8f32493c9cd709a5ca63a491d5e919f64 Mon Sep 17 00:00:00 2001
From: Andreas Gerstmayr <agerstmayr@redhat.com>
Date: Tue, 10 Nov 2020 20:22:40 +0100
Subject: [PATCH] re-add comment about vendored deps

---
 grafana.spec | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/grafana.spec b/grafana.spec
index cbca255..e7863f3 100644
--- a/grafana.spec
+++ b/grafana.spec
@@ -109,6 +109,8 @@ Recommends: grafana-pcp
 %endif
 
 # vendored golang and node.js build dependencies
+# this is for security purposes, if nodejs-foo ever needs an update,
+# affected packages can be easily identified.
 # Note: generated by the Makefile (see README.md)
 Provides: bundled(golang(cloud.google.com/go/storage)) = 1.8.0
 Provides: bundled(golang(github.com/BurntSushi/toml)) = 0.3.1