M README.md => README.md +8 -5
@@ 59,11 59,14 @@ remotesrv assembly plus CredentialsService, the read-only `browse/` UI, the
## Pinned dependencies (and why)
-- **`git.sr.ht/~sircmpwn/core-go` v0.0.0-20260520082310-fdb3662452dc** — this
- exact pseudo-version matches the production instance's `core-go` submodule
- commit (`fdb3662`). **Never upgrade it** (no bare `go get -u`, no `@latest`);
- token validation, config, and crypto must behave identically to the rest of
- the instance.
+- **`git.sr.ht/~sircmpwn/core-go`, replaced by the instance fork
+ `git.srht.bigb.es/~bigbes/core-go`** (pinned via a `replace` directive to the
+ fork's `master`, currently `c2c2f38` = upstream + instance patches). The fork
+ is what production actually runs; token validation, config, and crypto must
+ behave identically to the rest of the instance. **Never `go get -u` it and
+ never drop the replace**; to bump, pin the fork's new commit pseudo-version
+ in the `replace` line and re-run the test suite. Fetching the fork needs
+ `GOPRIVATE=git.srht.bigb.es` (skips the public module proxy/sumdb).
- **`github.com/dolthub/dolt/go` v0.40.5-0.20260626152440-45335d44ad79** — a
pseudo-version pinned to the commit tagged **v2.1.10** (`45335d44`), the dolt
CLI version installed on the target host (`/opt/homebrew/bin/dolt`, v2.1.10).
M go.mod => go.mod +2 -0
@@ 163,3 163,5 @@ require (
google.golang.org/protobuf v1.36.11 // indirect
gopkg.in/src-d/go-errors.v1 v1.0.0 // indirect
)
+
+replace git.sr.ht/~sircmpwn/core-go => git.srht.bigb.es/~bigbes/core-go v0.0.0-20260718172441-c2c2f3848fa9
M go.sum => go.sum +2 -0
@@ 34,6 34,8 @@ git.sr.ht/~sircmpwn/getopt v1.0.0 h1:/pRHjO6/OCbBF4puqD98n6xtPEgE//oq5U8NXjP7ROc
git.sr.ht/~sircmpwn/getopt v1.0.0/go.mod h1:wMEGFFFNuPos7vHmWXfszqImLppbc0wEhh6JBfJIUgw=
git.sr.ht/~sircmpwn/go-bare v0.0.0-20210406120253-ab86bc2846d9 h1:Ahny8Ud1LjVMMAlt8utUFKhhxJtwBAualvsbc/Sk7cE=
git.sr.ht/~sircmpwn/go-bare v0.0.0-20210406120253-ab86bc2846d9/go.mod h1:BVJwbDfVjCjoFiKrhkei6NdGcZYpkDkdyCdg1ukytRA=
+git.srht.bigb.es/~bigbes/core-go v0.0.0-20260718172441-c2c2f3848fa9 h1:S/CncMS83NIBz+V5OlZEHlnrl1Yd5I4C7hDQ7lzQsTM=
+git.srht.bigb.es/~bigbes/core-go v0.0.0-20260718172441-c2c2f3848fa9/go.mod h1:JmathMemB+hBk1IgrMn6RuBGusd+fTg1s/X6rNVKXXU=
github.com/99designs/gqlgen v0.17.36 h1:u/o/rv2SZ9s5280dyUOOrkpIIkr/7kITMXYD3rkJ9go=
github.com/99designs/gqlgen v0.17.36/go.mod h1:6RdyY8puhCoWAQVr2qzF2OMVfudQzc8ACxzpzluoQm4=
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 h1:fou+2+WFTib47nS+nz/ozhEBnvU96bKHy6LjRsY4E28=