Update Dependencies to Fix Security Vulnerabiltiies

[nicholas-mainardi]

Describe the Bug
There are 2 CVEs related to modules indirectly imported by migrate v4.15.0:

• CVE-2020-26160 for module jwt-go
• CVE-2021-32760 for module containerd

Chain of dependencies for module jwt-go
go: github.com/snowflakedb/[email protected] requires github.com/Azure/[email protected] requires github.com/Azure/go-autorest/autorest/[email protected] requires github.com/dgrijalva/[email protected]+incompatible

Chain of dependencies for module containerd
go: github.com/dhui/[email protected] requires github.com/containerd/[email protected]

Both problems may be simply fixed by updating gosnowflake dependency to v1.6.2 and dktest dependency to versions >=v0.3.5

Migrate Version
v4.15.0

Go Version
go version go1.16.3 linux/amd64

[dhui]

Thanks for providing such a detailed report @nicholas-mainardi!

The containerd security vulnerability has been addressed in 71106e5 which is available in the master branch.

#638 will fix the jwt-go vulnerability.

[dhui]

Fixed in v4.15.1