diff --git a/flakehashes.json b/flakehashes.json
index 47f8dac4..e5b0e740 100644
--- a/flakehashes.json
+++ b/flakehashes.json
@@ -1,6 +1,6 @@
 {
   "vendor": {
-    "goModSum": "sha256-KJAFccbKRC32xxF7gMKO7C4tqokz1sQAbKQpw3jiqe4=",
-    "sri": "sha256-sJtPLelpL4TYjo9mgXkeLlKumgNrR6YjV+BuAlbmkn4="
+    "goModSum": "sha256-F2nYVzNnGKvnxKekviMR8DLIH6e1nXZ2x6LUFJ/LzvA=",
+    "sri": "sha256-JKKdJ+ilDf7vPIltsj/u2OWfbMm1rJCe/wgG0eEkRLE="
   }
 }
diff --git a/go.mod b/go.mod
index 6bb98898..85d5b77c 100644
--- a/go.mod
+++ b/go.mod
@@ -44,6 +44,7 @@ require (
 	go4.org/netipx v0.0.0-20231129151722-fdeea329fbba
 	golang.org/x/crypto v0.54.0
 	golang.org/x/exp v0.0.0-20260603202125-055de637280b
+	golang.org/x/mod v0.37.0
 	golang.org/x/net v0.57.1-0.20260729233039-99c3b0a8f463
 	golang.org/x/oauth2 v0.36.0
 	golang.org/x/sync v0.22.0
@@ -225,7 +226,6 @@ require (
 	go4.org/mem v0.0.0-20240501181205-ae6ca9944745 // indirect
 	golang.org/x/exp/typeparams v0.0.0-20260603202125-055de637280b // indirect
 	golang.org/x/image v0.41.0 // indirect
-	golang.org/x/mod v0.37.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
 	golang.org/x/term v0.45.0 // indirect
 	golang.org/x/text v0.40.0 // indirect