diff --git a/changelog/unreleased/issue-2482 b/changelog/unreleased/issue-2482
new file mode 100644
index 000000000..106e2caf8
--- /dev/null
+++ b/changelog/unreleased/issue-2482
@@ -0,0 +1,9 @@
+Change: Remove vendored dependencies
+
+We've removed the vendored dependencies (in the subdir `vendor/`). When
+building restic, the Go compiler automatically fetches the dependencies. It
+will also cryptographically verify that the correct code has been fetched by
+using the hashes in `go.sum` (see the link to the documentation below).
+
+https://github.com/restic/restic/issues/2482
+https://golang.org/cmd/go/#hdr-Module_downloading_and_verification