`go get` with dependency version pinning