Fix go-git and Google API dependency vulnerabilities

[chrisyuska]

This PR fixes several CVEs that have been reported, but primarily targets these two:

1. gopkg.in/src-d/go-git.v4 CVE-2023-49569 (9.8)
2. google.golang.org/grpc CVE-2023-44487 (7.5)

Steps taken

go.mod and go.sum changes were auto-generated by running:

1. go get github.com/go-git/go-git/v5
2. go get google.golang.org/api
3. go mod tidy

[chrisyuska]

Hey @mickael-kerjean , I just wanted to call attention to this. I rely on this application (thank you btw!), but AWS is reporting these CVEs on the container scans. The dependency updates appear to be fully backwards-compatible, but I'm not able to verify 100%.

[mickael-kerjean]

It will take a bit of time to review as I don't want to introduce some weird issue by upgrading some deps

[chrisyuska]

Totally reasonable. I reviewed the two dependencies' changelogs and didn't see any breaking changes outside of go-git's renamed package, but there is a fair bit of indirect dependency updates too. Let me know if I can help in any way.