reformat go.mod

Signed-off-by: Christian Kadner <ckadner@us.ibm.com>

go.mod

@@ -32,7 +32,10 @@ require (
 	sigs.k8s.io/yaml v1.3.0
 )
 
+// when adding or removing to the replace-ments below, remove the following block of
+// indirect dependencies and run `go mod tidy -compat=1.21` (see go version above)
 require (
+	cloud.google.com/go v0.110.2 // indirect
 	cloud.google.com/go/compute v1.19.3 // indirect
 	cloud.google.com/go/compute/metadata v0.2.3 // indirect
 	cloud.google.com/go/iam v1.0.1 // indirect
@@ -126,10 +129,6 @@ require (
 	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
 )
 
-// when adding/remove replace, remove the following block of indirect dependencies
-// and run `go mod tidy -compat=1.20` (based on go version above)
-require cloud.google.com/go v0.110.2 // indirect
-
 replace (
 	// Fixes CVE-2022-21698 and CVE-2023-45142
 	// this dependency comes from k8s.io/component-base@v0.26.4 and k8s.io/apiextensions-apiserver@v0.26.4