fixes attribution retry logic

[jaxesn]

Issue #, if available:

Description of changes:

We will occasionally see timeouts when requesting the go-import url. This code has largely been unchanged for 2 years, but turns out the retry logic was just wrong and when the timeouts would occur, they would sometimes result in uncaught exceptions. This looks like a big change, but for the most part its just changing the old promise still methods to better utilize async/await and actually work in terms of retrying.

Since I was here, went ahead and updated the dependencies and updated some of the expected output files due to changes in upstream repo names.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[jaxesn]

/approve

[eks-distro-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jaxesn

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [jaxesn]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment