Dependabot workaround

Author: mattolenik

go.mod

@@ -7,7 +7,7 @@ require (
 	github.com/juju/errors v0.0.0-20210818161939-5560c4c073ff
 	github.com/juju/testing v0.0.0-20201030020617-7189b3728523 // indirect
 	github.com/lixiangzhong/dnsutil v1.4.0
-	github.com/miekg/dns v1.1.43 // indirect
+	github.com/miekg/dns v1.1.43
 	github.com/rs/zerolog v1.26.0
 	github.com/spf13/cobra v1.2.1
 	github.com/spf13/viper v1.9.0

tools/tools.go

@@ -1,3 +1,4 @@
+//go:build tools
 // +build tools
 
 package tools
@@ -7,5 +8,13 @@ package tools
 // during `go mod tidy`
 
 import (
+	// gotestsum is a test runner that produces test output in other formats, such as JUnit XML.
 	_ "gotest.tools/gotestsum"
+
+	// This one is actually to prevent a misleading Dependabot error. Without it,
+	// Dependabot will claim that this module is using an outdated version of this
+	// module even when it isn't, presumably due to it being an indirect dependency from
+	// the lixiangzhong/dnsutil package. Adding it here creates a direct dependency and
+	// prevents go mod tidy from removing it from this module's go.mod.
+	_ "github.com/miekg/dns"
 )