fix: bump dependencies to fix CVEs

[phisco]

Signed-off-by: Philippe Scorsolini p.scorsolini@gmail.com

Description of your changes

Bumping a few dependencies to fix CRITICAL and HIGH vulnerabilities found by trivy.

Fixes #3562

I have:

• Read and followed Crossplane's contribution process.
• Run make reviewable to ensure this PR is ready for review.
• Added backport release-x.y labels to auto-backport this PR if necessary.

How has this code been tested

trivy fs . before this patch was reporting a few CVEs, which are not present anymore with these changes.

[hasheddan]

Thanks @phisco! I'll add backports to relevant active branches here, as we'll likely want to do patches on each 👍🏻

[github-actions]

Backport failed for release-1.8, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-1.8
git worktree add -d .worktree/backport-3563-to-release-1.8 origin/release-1.8
cd .worktree/backport-3563-to-release-1.8
git checkout -b backport-3563-to-release-1.8
ancref=$(git merge-base 1d85c436146f6fb81f409e1b28874763dc77f4c1 9f813da0b47d176383bba7bbe6a0582b2de4716d)
git cherry-pick -x $ancref..9f813da0b47d176383bba7bbe6a0582b2de4716d

[github-actions]

Backport failed for release-1.9, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-1.9
git worktree add -d .worktree/backport-3563-to-release-1.9 origin/release-1.9
cd .worktree/backport-3563-to-release-1.9
git checkout -b backport-3563-to-release-1.9
ancref=$(git merge-base 1d85c436146f6fb81f409e1b28874763dc77f4c1 9f813da0b47d176383bba7bbe6a0582b2de4716d)
git cherry-pick -x $ancref..9f813da0b47d176383bba7bbe6a0582b2de4716d

[github-actions]

Backport failed for release-1.10, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-1.10
git worktree add -d .worktree/backport-3563-to-release-1.10 origin/release-1.10
cd .worktree/backport-3563-to-release-1.10
git checkout -b backport-3563-to-release-1.10
ancref=$(git merge-base 1d85c436146f6fb81f409e1b28874763dc77f4c1 9f813da0b47d176383bba7bbe6a0582b2de4716d)
git cherry-pick -x $ancref..9f813da0b47d176383bba7bbe6a0582b2de4716d