···2929 # vendorHash pins the Go module download FOD. Update this whenever
3030 # go.mod / go.sum changes by replacing it with lib.fakeHash and
3131 # rebuilding to surface the new hash.
3232- vendorHash = "sha256-BJTnyr5NIw2HZ+7jgnSO1kkEt507BQfLrYht6TKWypg=";
3232+ vendorHash = "sha256-nTnfbKKswY1phPsRCTh/MCe4LdOeQfAJBqwRg3VK64M=";
33333434 # The repo ships a stale `tack` binary at the root that gets caught
3535 # by `go test ./...`-style discovery; ignore it during the build.
3636 subPackages = ["."];
3737+3838+ # Fetch modules via the Go module proxy instead of synthesizing a
3939+ # vendor/ directory. We pull in deps (e.g. tangled.org/core ->
4040+ # go-redis/cache) whose test files require github.com/onsi/gomega;
4141+ # `go mod vendor` then refuses to build because gomega is in go.mod
4242+ # but not marked explicit in vendor/modules.txt. Proxy mode sidesteps
4343+ # the vendor consistency check entirely.
4444+ proxyVendor = true;
37453846 # mattn/go-sqlite3 needs cgo + a C compiler.
3947 env.CGO_ENABLED = "1";