`go.mod` and `WORKSPACE` are not synced on dependencies. Dependabot usually posts PR to update a dependency, e.g. https://github.com/bazelbuild/remote-apis-sdks/pull/512 which leaves `WORKSPACE` behind.
