Update Dependencies to Fix Security Vulnerabiltiies

[nicholas-mainardi]

Describe the Bug
There are 2 CVEs related to modules indirectly imported by migrate v4.15.0:

• CVE-2020-26160 for module jwt-go
• CVE-2021-32760 for module containerd

Chain of dependencies for module jwt-go
go: github.com/snowflakedb/gosnowflake@v1.4.3 requires github.com/Azure/azure-storage-blob-go@v0.13.0 requires github.com/Azure/go-autorest/autorest/adal@v0.9.2 requires github.com/dgrijalva/jwt-go@v3.2.0+incompatible

Chain of dependencies for module containerd
go: github.com/dhui/dktest@v0.3.4 requires github.com/containerd/containerd@v1.4.3

Both problems may be simply fixed by updating gosnowflake dependency to v1.6.2 and dktest dependency to versions >=v0.3.5

Migrate Version
v4.15.0

Go Version
go version go1.16.3 linux/amd64

[dhui]

Thanks for providing such a detailed report @nicholas-mainardi!

The containerd security vulnerability has been addressed in 71106e5 which is available in the master branch.

#638 will fix the jwt-go vulnerability.

[dhui]

Fixed in v4.15.1