Dependabot updates `backend/` only, so the example module that replaces it with `../../` keeps the old versions as indirect entries and the `test examples` job fails with `go: updates to go.mod needed`. Beyond testify itself this picks up the yaml module move, from `gopkg.in/yaml.v3` to `go.yaml.in/yaml/v3`, and drops two indirect entries nothing needs any more.