title: Why go.mod keeps changing with go test
body: <p>Hi I want to pin a particular version of dependency in my <code>go.mod</code>, like</p>
  
  <pre><code>    github.com/dependecy v1.7.0
  </code></pre>
  
  <p>And when I run <code>go test</code> or <code>go build</code>, sometimes it gets updated to</p>
  
  <pre><code>    github.com/dependecy v1.8.0
  </code></pre>
  
  <p>The tricky part is sometimes it changes, and sometimes it does not. We would want to pin to an older version because the new version has a bug. Any idea why this is happening?</p>