We depend on go-ethereum and though the project is loaded as vendor/github.com/ethereum/go-ethereum , it actually comes from github.com/status-im/go-ethereum.
The idea is keep all our local changes to go-ethereum in github.com/status-im/go-ethereum and keep them documented and there's a special process to make this happen:
status-go including go-ethereum in the vendor folder.github.com/status-im/go-ethereum and check out the latest branch like status/1.7.2-stable.go-ethereum folder from the status-go vendor directory into the newly cloned go-ethereum.git diff and ensure there're only those changes you've intended to make.