I've been waiting for a consensus to appear on Go dependency management. Finally I think we can call it - godep or something like it seems to be what works best.

Google said they were going to wait and see what approach worked best in practice before they integrated dependency management into the go tool. I think we're there now. The ball's in your court google.