450f6b9955
update to the latest version of this dependency, which has a fix for a authorization bypass in the ssh package. We don't use this functionality, so there's no need to backport this change (other than de-noising false positives). This is CVE-2024-45337 and Go issue https://go.dev/issue/70779. full diff: https://github.com/golang/crypto/compare/v0.29.0...v0.31.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>