util/resolve: adjust require of deps.dev/util/pypi

[G-Rath]

Currently I'm getting an error over at osv-scalibr when trying to run go list which is used by my IDE:

/home/jones/go/pkg/mod/golang.org/[email protected]/bin/go list -json -m -u -mod=readonly all #gosetup
go: deps.dev/util/[email protected]: invalid version: unknown revision 000000000000

From my research, it seems that this revision is used by Go in some situations, such as when you have a replace directive without a corresponding require directive, though I'm still not actually sure if that is invalid.

I am suspect though that there are direct requires for the other replace'd utils which have more expected revision SHAs - I suspect this might have been the result of the new package being introduced in the same PR as it was being required, so it literally didn't exist upstream at the time?

I've attempted to fix this by running go get deps.dev/util/pypi@latest

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.