It seems the correct URL is https://proxy.golang.org/github.com/google/oss-rebuild/@v/v0.0.0-20251008203231-2e9e242ca650.zip (replace @latest with @v).
@latest
@v
This proves that GOPROXY does cache untagged commits too.