Go: dependabot doesn't remove old version of package from go.sum when updating

[echarrod]

dependabot correctly updates the go.mod, and adds the new version to go.sum. But it doesn't remove the old version from go.sum.

Recent examples of this (see dependabot original commit):

• Bump github.com/golang/protobuf from 1.3.1 to 1.3.4 getyoti/yoti-go-sdk#111
• Bump github.com/golang/protobuf from 1.3.4 to 1.3.5 getyoti/yoti-go-sdk#112
• Bump github.com/golang/protobuf from 1.3.5 to 1.4.0 getyoti/yoti-go-sdk#120

Created #1707, but looks like this is a better place to report bugs

[echarrod]

Another example - getyoti/yoti-go-sdk#121

[hmarr]

This would be solved by fixing https://github.com/dependabot/feedback/issues/215. That's not the only way to solve this issue, so I'm going to leave them as separate issues for now.

[echarrod]

And one more - getyoti/yoti-go-sdk#122 (if this isn't helpful, let me know and I'll stop commenting!)

[echarrod]

This seems to be fixed now, probably down to https://github.com/dependabot/feedback/issues/215, I'll close

[yp05327]

It seems that this issue is not fixed yet:
TeaChart/teachart#7
TeaChart/teachart#8
TeaChart/teachart#9