Migrate module path to go.michaelspost.com

README.md

@@ -21,13 +21,13 @@ gatekit is what runs on the node and talks to it.
 Gatekit v0.5.0 requires Go 1.26.5 or newer:
 
 ```sh
-go get github.com/kilo666mj/gatekit@v0.5.0
+go get go.michaelspost.com/gatekit@v0.7.0
 go test ./...
 ```
 
 Import only the packages the application needs; the module deliberately has no
 top-level runtime or command. Browse the
-[package reference](https://pkg.go.dev/github.com/kilo666mj/gatekit) for the
+[package reference](https://pkg.go.dev/go.michaelspost.com/gatekit) for the
 current exported API.
 
 ## Security boundary
@@ -190,3 +190,15 @@ are never evicted. Periodic `PruneToLimit` remains useful for policy-created row
 MIT
 
 [gate-stack-guide]: https://github.com/kilo666mj/michaelspost-docs/blob/main/docs/guides/gate-stack.md
+
+## Module path migration
+
+Starting with `v0.7.0`, the canonical module path is
+`go.michaelspost.com/gatekit`. Update imports (including package subpaths)
+and the requirement in `go.mod` together, then run `go mod tidy` and your tests.
+Do not mix the old and new package paths in one build: Go treats them as
+different package identities. No `replace` directive is needed.
+
+Earlier tags retain `github.com/kilo666mj/gatekit` and remain available for
+existing consumers pinned to those releases. GitHub remains the source repository;
+the vanity path allows future hosting changes without changing imports again.

controlplane/controlplane.go

@@ -18,8 +18,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/kilo666mj/gatekit/approval"
-	"github.com/kilo666mj/gatekit/store"
+	"go.michaelspost.com/gatekit/approval"
+	"go.michaelspost.com/gatekit/store"
 )
 
 const (

controlplane/controlplane_test.go

@@ -11,7 +11,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/kilo666mj/gatekit/store"
+	"go.michaelspost.com/gatekit/store"
 )
 
 func openStore(t *testing.T) *store.Store {

controlplane/scoped_test.go

@@ -1,7 +1,7 @@
 package controlplane
 
 import (
-	"github.com/kilo666mj/gatekit/store"
+	"go.michaelspost.com/gatekit/store"
 	"io"
 	"net/http"
 	"net/http/httptest"

controlplane/security_test.go

@@ -10,7 +10,7 @@ import (
 	"sync/atomic"
 	"testing"
 
-	"github.com/kilo666mj/gatekit/store"
+	"go.michaelspost.com/gatekit/store"
 )
 
 func TestRejectInsecureURLs(t *testing.T) {

go.mod

@@ -1,4 +1,4 @@
-module github.com/kilo666mj/gatekit
+module go.michaelspost.com/gatekit
 
 go 1.26.5
 

proxy/proxy.go

@@ -18,7 +18,7 @@ import (
 	"sync"
 	"time"
 
-	"github.com/kilo666mj/gatekit/semaphore"
+	"go.michaelspost.com/gatekit/semaphore"
 )
 
 // Route maps one listening address to one backend address. Port is derived

store/decisions.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"github.com/kilo666mj/gatekit/approval"
+	"go.michaelspost.com/gatekit/approval"
 	"time"
 )
 

store/decisions_test.go

@@ -2,7 +2,7 @@ package store
 
 import (
 	"database/sql"
-	"github.com/kilo666mj/gatekit/approval"
+	"go.michaelspost.com/gatekit/approval"
 	"net/netip"
 	"path/filepath"
 	"testing"

store/store.go

@@ -21,7 +21,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/kilo666mj/gatekit/approval"
+	"go.michaelspost.com/gatekit/approval"
 
 	_ "modernc.org/sqlite"
 )