Turn on vendoring

.golangci.yaml

@@ -5,7 +5,7 @@
 
 run:
   deadline: 3m # 1m by default
-  modules-download-mode: readonly
+  modules-download-mode: vendor
 
 output:
   # Do not print lines of code with issue.

Makefile

@@ -18,7 +18,7 @@ build/release-info: CHANGELOG.md | build
 	@if ! hash release-info 2>/dev/null; then printf "\e[1;36m>> Installing release-info...\e[0m\n"; go install github.com/sapcc/go-bits/tools/release-info@latest; fi
 	release-info $< $(shell git describe --tags --abbrev=0) > $@
 
-GO_BUILDFLAGS =
+GO_BUILDFLAGS = -mod vendor
 GO_LDFLAGS =
 GO_TESTENV =
 
@@ -74,8 +74,14 @@ build/cover.html: build/cover.out
 build:
 	@mkdir $@
 
-tidy-deps: FORCE
+vendor: FORCE
 	go mod tidy
+	go mod vendor
+	go mod verify
+
+vendor-compat: FORCE
+	go mod tidy -compat=$(shell awk '$$1 == "go" { print $$2 }' < go.mod)
+	go mod vendor
 	go mod verify
 
 license-headers: FORCE
@@ -118,7 +124,8 @@ help: FORCE
 	@printf "  \e[36mbuild/cover.html\e[0m      Generate an HTML file with source code annotations from the coverage report.\n"
 	@printf "\n"
 	@printf "\e[1mDevelopment\e[0m\n"
-	@printf "  \e[36mtidy-deps\e[0m             Run go mod tidy and go mod verify.\n"
+	@printf "  \e[36mvendor\e[0m                Run go mod tidy, go mod verify, and go mod vendor.\n"
+	@printf "  \e[36mvendor-compat\e[0m         Same as 'make vendor' but go mod tidy will use '-compat' flag with the Go version from go.mod file as value.\n"
 	@printf "  \e[36mlicense-headers\e[0m       Add license headers to all .go files excluding the vendor directory.\n"
 	@printf "  \e[36mclean\e[0m                 Run git clean.\n"
 

Makefile.maker.yaml

@@ -1,8 +1,17 @@
+# Configuration file for <https://github.com/sapcc/go-makefile-maker>
+
+metadata:
+  url: https://github.com/sapcc/limesctl
+
 binaries:
   - name: limesctl
     fromPackage: .
     installTo: bin/
 
+golang:
+  enableVendoring: true
+  setGoModVersion: true
+
 golangciLint:
   createConfig: true