Add CI step for validating vendored dependencies (#66)

Author: katiewasnothere

.github/workflows/common.yml

@@ -24,6 +24,12 @@ jobs:
           make fmt
           git diff
           if ! git diff --quiet ; then echo the following files require formatting or license headers: ; git diff --name-only ; false ; fi
+      - name: Check dependencies 
+        run: |
+          go mod tidy 
+          go mod vendor
+          git add --all --intent-to-add .
+          if ! git diff --quiet ; then echo Please run `go mod tidy && go mod vendor`. Out of date dependency files: ; git diff --name-only ; false ; fi
       - name: Check protobufs 
         run: | 
           make go-protos

go.mod

@@ -11,6 +11,7 @@ require (
 	github.com/google/uuid v1.6.0
 	github.com/mdlayher/vsock v1.2.1
 	github.com/moby/buildkit v0.26.2
+	github.com/moby/patternmatcher v0.6.0
 	github.com/opencontainers/go-digest v1.0.0
 	github.com/opencontainers/image-spec v1.1.1
 	github.com/pelletier/go-toml v1.9.5
@@ -55,7 +56,6 @@ require (
 	github.com/mdlayher/socket v0.5.1 // indirect
 	github.com/moby/docker-image-spec v1.3.1 // indirect
 	github.com/moby/locker v1.0.1 // indirect
-	github.com/moby/patternmatcher v0.6.0 // indirect
 	github.com/moby/sys/signal v0.7.1 // indirect
 	github.com/morikuni/aec v1.0.0 // indirect
 	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect