@chakie I recommend you read through the Go dependency pinning docs. This part is especially important in your case I think:
Note
It may help you to identify the correct version of a transitive dependency to be pinned in your plugin
go.mod
file by searching Nakama’svendor/modules.txt
file and look for the package that lead to the error.