This is why we pin versions. Go tool is common sense, allowing for any old tool version in the build chain invites failure.
In other words, no need to mix "dependencies" and "dev dependencies" together.