- Add networking access for the package to build
- Add git as builddep
- Syncthing changelog is available here
The whole point of the vendor source tarball is it ships vendored dependencies. Did you try removing networking and seeing if it still fetches go modules or even needs git? I doubt it needs either.