lgtm,codescanning
* The extractor now only extracts go.mod files belonging to extracted packages. In particular, vendored go.mod files will no longer be extracted unless the vendored package is explicitly passed to the extractor. This will remove unexpected `GoModExpr` and similar expressions seen by queries.

Add change note for go.mod extraction change
Add change note for go.mod extraction change

Co-authored-by: Chris Smowton <5a81572df968a2b235930ba79b24824d10ce67f0@github.com>
