title: go mod vendor without update to latest
body: <p>I’m trying to figure out if it’s possible to run go mod vendor without the go tool updating my go.mod file.</p>
  
  <p>I specifically <code>go get package/subpackage@commit</code> and commit my <code>go.mod</code> with the correct version.</p>
  
  <p>Then I run <code>go mod vendor</code> and it automatically bumps the version of the package that I just specifically set.</p>
  
  <p>I’ve looked at this page to no avail: <a href="https://github.com/golang/go/wiki/Modules#how-do-i-use-vendoring-with-modules-is-vendoring-going-away" rel="noreferrer">https://github.com/golang/go/wiki/Modules#how-do-i-use-vendoring-with-modules-is-vendoring-going-away</a></p>
  
  <p>I need to use vendor because I run a script that edits some of the vendored deps., I’m looking at the following build flow:</p>
  
  <pre><code>GO111MODULE=on go get package/subpackge@commit
  GO111MODULE=on go mod vendor
  ./Script/patch_vendors.sh --write
  GO111MODULE=off go build
  </code></pre>
  
  <p>My other option is modifying the copied source wherever go mod vendor donwloads it to, but
  not sure how to approach that.</p>
  
  <p>Thanks in advance</p>