Vulnerable module import: github.com/hashicorp/go-retryablehttp

[prochac]

The version of used github.com/hashicorp/go-retryablehttp module has known vuln: GO-2024-2947

$ govulncheck ./...
=== Symbol Results ===

Vulnerability #1: GO-2024-2947
    Leak of sensitive information to log files in
    github.com/hashicorp/go-retryablehttp
  More info: https://pkg.go.dev/vuln/GO-2024-2947
  Module: github.com/hashicorp/go-retryablehttp
    Found in: github.com/hashicorp/go-retryablehttp@v0.7.1
    Fixed in: github.com/hashicorp/go-retryablehttp@v0.7.7
    Example traces found:
      #1: connection.go:458:23: databricks.conn.handleStagingPut calls http.Client.Do, which eventually calls retryablehttp.RoundTripper.RoundTrip

Your code is affected by 1 vulnerability from 1 module.
This scan also found 2 vulnerabilities in packages you import and 2
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.

Please, update your go.mod

Ofc, the manual update in my go.mod is a valid option.

[prochac]

Consider update to github.com/go-jose/go-jose/v3@v3.0.3 and golang.org/x/crypto@v0.31.0 could be smart also.