We can commit broken vendoring here because there is no actual test to
verify that the vendor directory is clean after make vendor.
PR[1] had a renovate bug[2] which causes it to not run go mod tidy, this was
not caused by CI because of it.
[1] https://github.com/containers/common/pull/1555
[2] https://github.com/containers/automation/pull/148
Signed-off-by: Paul Holzinger <pholzing@redhat.com>