I noticed that after the rebase for #351 CI didn't run, whereas it should (since we're upgrading packages). This happens because as part of #350 we forgot to include go.mod|sum files as triggers.