exclude logrus v1.8.1, v1.8.0, v1.7.1. We use logrus v1.7.0, but a client ends up with logrus v1.8.1

In our foobar go.mod, we manually excluded versions of logrus we did not want:

exclude (
	github.com/sirupsen/logrus v1.7.1
	github.com/sirupsen/logrus v1.8.0
	github.com/sirupsen/logrus v1.8.1
)

go mod tidy then updates our foobar go.mod to require logrus v1.7.0, which is the desired version.

However, a client of foobar still gets logrus v1.8.1, which is not desired:

$ cat foobarclient.go
package foobarclient

import foobar "github.com/thepudds/test-go-mod-52296-a"

var F = foobar.Foobar

$ cat go.mod
module test-go-mod-52296-a-client

go 1.18

require github.com/thepudds/test-go-mod-52296-a v0.3.0

require (
        github.com/containerd/containerd v1.6.2 // indirect
        github.com/sirupsen/logrus v1.8.1 // indirect
        golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e // indirect
)

Full Changelog: v0.2.0...v0.3.0