fix dependabot alert

[rchincha]

https://github.com/project-zot/zot/security/dependabot/10

Signed-off-by: Ramkumar Chinchani rchincha@cisco.com

What type of PR is this?

bug

Which issue does this PR fix:

What does this PR do / Why do we need it:

Fix a dependabot alert triggered by distribution spec version in go.mod

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[codecov]

Codecov Report

Merging #460 (f6ac85e) into main (aee9421) will increase coverage by 0.06%.
The diff coverage is 92.30%.

@@            Coverage Diff             @@
##             main     #460      +/-   ##
==========================================
+ Coverage   83.73%   83.80%   +0.06%     
==========================================
  Files          49       49              
  Lines       10168    10210      +42     
==========================================
+ Hits         8514     8556      +42     
  Misses       1294     1294              
  Partials      360      360              

Impacted Files	Coverage Δ
pkg/api/authn.go	79.26% <82.35%> (+1.76%)	⬆️
pkg/api/config/config.go	79.31% <100.00%> (ø)
pkg/api/controller.go	91.02% <100.00%> (+0.35%)	⬆️
pkg/api/routes.go	74.27% <100.00%> (+0.05%)	⬆️
pkg/cli/root.go	88.76% <100.00%> (+0.60%)	⬆️
pkg/extensions/extensions.go	80.82% <100.00%> (ø)

📣 Codecov can now indicate which changes are the most critical in Pull Requests. Learn more

[shimish2]

lgtm