Update

vendor/tailscale.com/staticcheck.conf

@@ -2,6 +2,14 @@
 checks = [
 	"SA*", "-SA1019", "-SA2001", "-SA9003", # SA* are mostly legit code errors
 
+	# SA4023 (comparison always/never true) misfires on cross-platform
+	# code: per-GOOS stub functions that always return an error on the
+	# GOOS being analyzed make correct nil checks look constant. And
+	# lint:ignore directives can't help, as they'd be flagged as
+	# unmatched on the other GOOSes. Disabled 2026-07-31 with the bump
+	# to staticcheck v0.8.0-rc.1, which made the check smarter.
+	"-SA4023",
+
 	# S1?? are "code simplifications" which we consider unnecessary
 
 	# ST1??? are stylistic issues, some of which are generally accepted
@@ -9,7 +17,7 @@ checks = [
 	# https://github.com/golang/go/wiki/CodeReviewComments, then it
 	# may be an acceptable check.
 
-	# TODO(crawshaw): enable when we have docs? "ST1000", # missing package docs
+	"ST1000", # missing package docs
 	"ST1001", # discourage dot imports
 
 	"QF1004", # Use `strings.ReplaceAll` instead of `strings.Replace` with `n == 1`