Backport of deps: update go-getter into release/1.7.x

[hc-github-team-nomad-core]

Backport

This PR is auto-generated from #20391 to be assessed for backporting due to the inclusion of the label backport/1.7.x.

🚨

Warning automatic cherry-pick of commits failed. If the first commit failed,
you will see a blank no-op commit below. If at least one commit succeeded, you
will see the cherry-picked commits up to, not including, the commit where
the merge conflict occurred.

The person who merged in the original PR is:
@tgross
This person should manually cherry-pick the original PR into a new backport PR,
and close this one when the manual backport PR is merged in.

merge conflict error: POST https://api.github.com/repos/hashicorp/nomad/merges: 409 Merge conflict []

The below text is copied from the body of the original PR.

---

Ref: https://github.com/hashicorp/go-getter/releases/tag/v1.7.4

Note that Nomad isn't impacted on Linux due to our artifact sandboxing. The release notes above are in the process of being updated by our security team.

---

Overview of commits

• 745d1db

[hashicorp-cla-app]

All committers have signed the CLA.

[github-actions]

I'm going to lock this pull request because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.