deps: reconcile go.sum to sumdb-attested hashes, bump dex past the bare-cgo GPU binding

go.sum recorded hashes for luxfi/node v1.30.6 that match no artifact any
public infrastructure has ever served. The tag no longer exists on
github.com/luxfi/node (lowest tag is now v1.36.4); the module proxy's
cached .info preserves what it once pointed at, commit c3ea13a1, which is
itself unreachable from any ref today. sum.golang.org — append-only, so it
cannot be edited after the fact — attests 7jGPoONB.../UDoSWVYr..., and
three independent proxy caches serve byte-identical content hashing to
exactly that. The recorded values were therefore written from a direct VCS
fetch while the tag pointed somewhere else, and GONOSUMDB covering
github.com/luxfi/* meant the checksum database was never consulted to catch
the divergence. Same story for pq v1.0.3, half-reconciled already.

Both are re-recorded with the checksum database enabled, so the toolchain
verified them against the signed tree rather than trusting a download.

Second failure underneath: luxfi/dex v1.14.0 gated its GPU orderbook cgo
binding on bare `cgo`, so every cgo build had to supply dex_gpu.h from an
external lux-gpu install. v1.14.2 moves it behind an opt-in `dexgpu` tag.
Its go.mod hash is identical to v1.14.0's, so nothing else moves.

go build ./... and go vet ./... both clean.
This commit is contained in:
2026-08-28 08:48:53 -07:00
parent 03fe8b3c8e
commit 02a1b6dc0e
2 changed files with 6 additions and 4 deletions
+1 -1
View File
@@ -15,7 +15,7 @@ require (
github.com/luxfi/corona v0.10.3
github.com/luxfi/crypto v1.19.26
github.com/luxfi/database v1.20.4
github.com/luxfi/dex v1.14.0
github.com/luxfi/dex v1.14.2
github.com/luxfi/fhe v1.8.2
github.com/luxfi/geth v1.17.12
github.com/luxfi/lattice/v7 v7.1.4
+5 -3
View File
@@ -238,6 +238,8 @@ github.com/luxfi/dex v1.5.20 h1:Vu3D0iS1QcAPs1DtPjjtQpd+8bclkf5nisVYqaoEbkA=
github.com/luxfi/dex v1.5.20/go.mod h1:95k6Tl5HoyBRVd6IFzGlPOZE6SGqOyjnh4dSrJcplzM=
github.com/luxfi/dex v1.14.0 h1:4PtorVbRmbD73S6YWPvgp5GRCb9jeuaedl7mo1CbzCI=
github.com/luxfi/dex v1.14.0/go.mod h1:wYWQmwospvdKBWQ6OJMXb8I+kfgEtE46R1rD8H7vHCQ=
github.com/luxfi/dex v1.14.2 h1:SAm8UuyItXy9U7Gshi/HwNiXOZq1UIILxwuh8dMt41w=
github.com/luxfi/dex v1.14.2/go.mod h1:wYWQmwospvdKBWQ6OJMXb8I+kfgEtE46R1rD8H7vHCQ=
github.com/luxfi/fhe v1.8.2 h1:QllnObNFbi6D4mvFI6uQkepW8HgLtdy4RMR1TKYAInA=
github.com/luxfi/fhe v1.8.2/go.mod h1:16yxwhcnCez/rNcd/C9JjH9IjbEz73X+0tvlsONyLeA=
github.com/luxfi/geth v1.17.12 h1:UP/fhpcfbGPTrkOCwX3d88Oc3jVm5gTOgfjgq+lek6s=
@@ -264,11 +266,11 @@ github.com/luxfi/mlwe v0.2.1 h1:pRwTjNUUtzUxRIlMbUPpeh9DE2/NdqfS17hfdogazp4=
github.com/luxfi/mlwe v0.2.1/go.mod h1:DD9EHTeiyh/y0KGGeqL+q9S4n8raeGiGdaG/BQPAvT0=
github.com/luxfi/mock v0.1.1 h1:0HEtIjg1J6CWz+IUyP6rsGqNWTcmxjFnSQIhaDuARwY=
github.com/luxfi/mock v0.1.1/go.mod h1:jo35akl3Vtd8LbzDts8VJ0jmSVycrd1/eBi6g6t5hKU=
github.com/luxfi/node v1.30.6 h1:pyuxUjWFvydlBcYrGq5uBPLwZOtu18y6MVb550npiYY=
github.com/luxfi/node v1.30.6/go.mod h1:lWXDp8RQXEPdRvhu4iwTdf7CHm20b2CBZVbeq1maVAU=
github.com/luxfi/node v1.30.6 h1:7jGPoONBSb3VuK3zsGyvKY3vkvkBoG3owygkBwzL8Us=
github.com/luxfi/node v1.30.6/go.mod h1:UDoSWVYr6lhVaQRW+xbzU5/GBQOcaPKEMRUPde0BPZ4=
github.com/luxfi/p2p v1.21.1 h1:gmz1JMDhzHIL3dQlhwIDvR4OlFuhNVfnWUl/ipYhAIo=
github.com/luxfi/p2p v1.21.1/go.mod h1:SsNPR5fPGWWNem9plGWhSmRqyDoysJ3kPAN0zG0g3iw=
github.com/luxfi/pq v1.0.3 h1:ksw1dmfTR0dqqNMRS7BjGcprCO2Fhc+3Iiq2/NMuONw=
github.com/luxfi/pq v1.0.3 h1:pFlQm1+5FuKTDUh2y/23bXWkN4I2Rc5iuxJypwDFFMs=
github.com/luxfi/pq v1.0.3/go.mod h1:8bppZcRElfrVt0n3nYCZW3iX1TvhvzNbdjNdK1irgIE=
github.com/luxfi/runtime v1.1.3 h1:6Yp/PKwQCohjXmBR9GA+gamdSAp+xA2rdN6J/74Y4aw=
github.com/luxfi/runtime v1.1.3/go.mod h1:r1uonDnxRCnPz6N6WYwaC72HW95KbFIAyChnJyxePGs=