vendor: run go mod tidy

[bobbypage]

#2716 updated many dependencies some of which we reverted in #2726 and #2728

In the process, looks like go mod tidy was not run, so the go.mod wasn't up to date.

Before this change:

$ go list -m all | wc -l
271

After go mod tidy:

$ go list -m all | wc -l
140

We need to also followup and add go mod tidy check to CI, created #2730 to track that