chore: address snyk vulnerabilities

[Vikas26021999]

Description

With the changes of this PR contains and ignoring vulnerabilities not applicable to us (etcd server mostly), we reached to zero:

How

1. If we could upgrade a dependency to its vulnerable dependencies, we did so.
2. Otherwise, replace was used to force the correct version for dependencies that are not in our control

Notion Ticket

https://www.notion.so/rudderstacks/rudder-server-snyk-vulnerabilities-56d33002b9c54385abbfed434124a43f

Security

• The code changed/added as part of this pull request won't create any security issues with how the software is being used.

[codecov]

Codecov Report

Base: 44.08% // Head: 44.04% // Decreases project coverage by -0.04% ⚠️

Coverage data is based on head (04e007f) compared to base (f13ea33).
Patch has no changes to coverable lines.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2579      +/-   ##
==========================================
- Coverage   44.08%   44.04%   -0.05%     
==========================================
  Files         187      187              
  Lines       39255    39255              
==========================================
- Hits        17305    17288      -17     
- Misses      20845    20862      +17     
  Partials     1105     1105              

Impacted Files	Coverage Δ
services/rsources/handler.go	69.72% <0.00%> (-1.39%)	⬇️
processor/processor.go	71.23% <0.00%> (-0.83%)	⬇️
warehouse/schema.go	48.98% <0.00%> (+1.15%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[chrikar]

LGTM! Let's check with server team for this as well.

[lvrach]

buger/jsonparser was conflicting with migrate library, it was preventing the upgrade of migrate library.

Since we could easily use json.Unmarshal to parse it I've removed it as a dependency.

[atzoum]

one minor comment with regards to replacements

[atzoum]

Would it be useful to add a comment here to remind us that at some point, once we upgrade the relevant libraries, these replacements can become outdated and should be removed?

[lvrach]

Yeah, eventually, we should do that, and we also need to keep the replacement versions up to date.

I am not fun of replace solution, and I tried to use it as little as possible. I am considering ways we can avoid it or make it easier to maintain.