minor factual adjustment: "go get" doesn't update a package once it's been downloaded. you need to force it.
"there is no guarantee that a build will be the same from day to day" is simply not true.
"there is no guarantee that a build will be the same from day to day" is simply not true.
For them different location (to import from) for an incompatible version is good-enough.