And remove vendor/, as it's now unnecessary. go.sum ensures that dependencies aren't tampered with, and proxy.golang.org keeps copies of all the archives.
Daniel Martí