Stop hosted Go redirects claiming unpatched deps - #252

Merged

Mikola Lysenko (mikolalysenko) merged 7 commits into

mainfrom

fix/golang-replace-ownership

Sep 24, 2026

Commits on Sep 24, 2026

Stop hosted Go redirects claiming unpatched deps
Mikola Lysenko (mikolalysenko)
committed
ad8d067
Fix reconcile to use canonical_purl for percent-decoded Go version comparison
Cursor Agent (cursoragent)
committed
943bbfd
Log the +incompatible reconcile fix
Mikola Lysenko (mikolalysenko)
committed
0f19e6d
Restore go.sum exactly on hosted Go rollback
Mikola Lysenko (mikolalysenko)
committed
5db4858
Unwind hosted Go redirects before vendoring
Mikola Lysenko (mikolalysenko)
committed
dd64a11
Honor GOPROXY off/direct and GOPRIVATE in fetch
Mikola Lysenko (mikolalysenko)
committed
47a4996
Merge main (v5 manifest-less VEX) into Go fixes
Mikola Lysenko (mikolalysenko)
committed
4be201a