2024/03/07

That go mod tidy needs to be followed by go mod vendor to keep ./vendor/modules.txt up-to-date. That go mod vendor only pulls in files that are referenced by your current project.

See https://go.dev/ref/mod#vendoring