Modernize vendor set

Could you bump versions of Go modules in go.mod?
To pick available module updates and be more suitable to recent versions of Go.

I'm especially interested in updating go-difflib version to the latest, to avoid manual patching while building reposurgeon binary package.