We require some newer versions to support Go 1.16, so let's bump the versions and vendor new copies of the libraries.
In a future commit, we'll introduce a use of the semaphore package to prevent goroutines from accidentally running us out of resources. Add the package to go.mod and go.sum and vendor it in.