2023-06-06: bump up dependencies update identified by dependabot

[chaochn47]

Summary of actions:

Pure indirect dependency in tools/mod/go.mod

• build(deps): bump golang.org/x/tools from 0.9.1 to 0.9.3 in /tools/mod #16009 should be closed. It is used by https://github.com/mgechev/revive/releases/tag/v1.3.2 which is the latest release tag.
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.17 in /tools/mod #16010 should be closed. It is used by https://github.com/cloudflare/cfssl/releases/tag/v1.6.4 which is the latest release tag.
• build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 in /tools/mod #16011 should be closed. It is used by https://github.com/mgechev/revive/releases/tag/v1.3.2 which is the latest release tag.

Other indirect dependency

• build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.3 #16012 should be closed. It is only used by github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0 which uses github.com/sirupsen/logrus@v1.4.2. This version of indirect dependency seems not used by any modules.

Other dependency update

• build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 #16013 should be closed and in favor of this PR to bump up version globally.
• build(deps): bump arduino/setup-protoc from 1.3.0 to 2.0.0 #16016 should be closed because arduino/setup-protoc v2.0.0 introduces a breaking change: Support only the new protobuf versioning scheme arduino/setup-protoc#78 and the release manager recommends projects that depend on old protoc version (like us v3.14.0) uses v1 in Support only the new protobuf versioning scheme arduino/setup-protoc#78 (comment). Once Protobuf: cleanup both golang/protobuf and gogo/protobuf #14533 is sorted out, we can bump up this dependency.

Test workflow passed and merged already

• build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 #16014
• build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 #16015

Please read https://github.com/etcd-io/etcd/blob/main/CONTRIBUTING.md#contribution-flow.

[jmhbnz]

LGTM - Thanks for keeping the docs up to date for the blocker with setup-protoc.

Note:

• cfssl has an open pr now to bump go-sqlite3 so their next release should include that update.
• go-grpc-middleware have removed github.com/sirupsen/logrus as a depdendency in later releases so once we can update that the indirect for logrus should go away.

[ahrtr]

LGTM

Thanks @chaochn47