fix: replace go packages with CVEs with newer versions (#154)

### Description

OB-40419 Replace go packages with CVEs with newer versions.

```
$ docker scout cves sha256:f43b4aeb536f88253ba886d3d0e9663b4df4116910385dd670fa28a6c95703f3
    i New version 1.16.1 available (installed version is 1.15.1) at https://github.com/docker/scout-cli
    ✓ Image stored for indexing
    ✓ Indexed 388 packages
    ✓ Provenance obtained from attestation
    ✗ Detected 2 vulnerable packages with a total of 3 vulnerabilities


## Overview

                    │                              Analyzed Image                                
────────────────────┼────────────────────────────────────────────────────────────────────────────
  Target            │  sha256:f43b4aeb536f88253ba886d3d0e9663b4df4116910385dd670fa28a6c95703f3   
    digest          │  f43b4aeb536f                                                              
    platform        │ linux/arm64                                                                
    vulnerabilities │    0C     0H     2M     1L                                                 
    size            │ 44 MB                                                                      
    packages        │ 388                                                                        


## Packages and Vulnerabilities

   0C     0H     1M     1L  github.com/aws/aws-sdk-go 1.55.5
pkg:golang/github.com/aws/[email protected]

    ✗ MEDIUM CVE-2020-8911
      https://scout.docker.com/v/CVE-2020-8911
      Affected range : >=0        
      Fixed version  : not fixed  
    
    ✗ LOW CVE-2020-8912
      https://scout.docker.com/v/CVE-2020-8912
      Affected range : >=0        
      Fixed version  : not fixed  
    

   0C     0H     1M     0L  openssl 3.3.2-r0
pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

    ✗ MEDIUM CVE-2024-9143
      https://scout.docker.com/v/CVE-2024-9143
      Affected range : <3.3.2-r1  
      Fixed version  : 3.3.2-r1   
    


3 vulnerabilities found in 2 packages
  CRITICAL  0  
  HIGH      0  
  MEDIUM    2  
  LOW       1  


What's next:
    View base image update recommendations → docker scout recommendations sha256:f43b4aeb536f88253ba886d3d0e9663b4df4116910385dd670fa28a6c95703f3
```

### Checklist
- [ ] Created tests which fail without the change (if possible)
- [ ] Extended the README / documentation, if necessary

Author: obs-gh-mattcotter

go.mod

@@ -13,7 +13,7 @@ require (
 	github.com/stretchr/testify v1.9.0
 	go.opentelemetry.io/collector/otelcol v0.114.0
 	go.uber.org/zap v1.27.0
-	golang.org/x/sys v0.27.0
+	golang.org/x/sys v0.29.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 )
@@ -360,14 +360,14 @@ require (
 	go.opentelemetry.io/proto/otlp v1.3.1 // indirect
 	go.uber.org/atomic v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.29.0 // indirect
+	golang.org/x/crypto v0.32.0 // indirect
 	golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8 // indirect
 	golang.org/x/mod v0.21.0 // indirect
 	golang.org/x/net v0.31.0 // indirect
 	golang.org/x/oauth2 v0.23.0 // indirect
-	golang.org/x/sync v0.9.0 // indirect
-	golang.org/x/term v0.26.0 // indirect
-	golang.org/x/text v0.20.0 // indirect
+	golang.org/x/sync v0.10.0 // indirect
+	golang.org/x/term v0.28.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
 	golang.org/x/tools v0.26.0 // indirect
 	gonum.org/v1/gonum v0.15.1 // indirect
@@ -392,6 +392,10 @@ require (
 )
 
 replace (
+	// TODO remove these overrides when we upgrade to otelcol v0.117.0
+	github.com/docker/docker => github.com/docker/docker v27.4.1+incompatible
 	github.com/observeinc/observe-agent/components/processors/observek8sattributesprocessor v0.0.0-00010101000000-000000000000 => ./components/processors/observek8sattributesprocessor
 	github.com/observeinc/observe-agent/observecol => ./observecol
+	golang.org/x/crypto => golang.org/x/crypto v0.32.0
+	golang.org/x/net => golang.org/x/net v0.34.0
 )