chore: Patch CVE-2023-45288

[ingve]

Fixes

Scanning your code and 367 packages across 55 dependent modules for known vulnerabilities...

=== Symbol Results ===

Vulnerability #1: GO-2024-2687
    HTTP/2 CONTINUATION flood in net/http
  More info: https://pkg.go.dev/vuln/GO-2024-2687
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.22.0
    Fixed in: golang.org/x/net@v0.23.0
    Example traces found:
      #1: internal/snowflake.go:27:2: internal.init calls gosnowflake.init, which eventually calls http2.ConfigureTransports
      #2: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.ConnectionError.Error
      #3: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.ErrCode.String
      #4: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.FrameHeader.String
      #5: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.FrameType.String
      #6: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.GoAwayError.Error
      #7: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.Setting.String
      #8: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.SettingID.String
      #9: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.StreamError.Error
      #10: internal/snowflake_read.go:180:16: internal.entIter.Next calls sql.Rows.Next, which eventually calls http2.Transport.NewClientConn
      #11: internal/snowflake_read.go:180:16: internal.entIter.Next calls sql.Rows.Next, which eventually calls http2.Transport.RoundTrip
      #12: internal/files.go:46:24: internal.WriteAsGzippedNDJson calls gzip.Writer.Close, which eventually calls http2.chunkWriter.Write
      #13: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.connError.Error
      #14: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.duplicatePseudoHeaderError.Error
      #15: internal/config.go:71:26: internal.EnvOverrides calls os.LookupEnv, which eventually calls http2.gzipReader.Close
      #16: cmd/snowflake-datalayer/main.go:35:15: snowflake.main calls common.ServiceRunner.StartAndWait, which eventually calls http2.gzipReader.Read
      #17: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.headerFieldNameError.Error
      #18: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.headerFieldValueError.Error
      #19: internal/snowflake_read.go:180:16: internal.entIter.Next calls sql.Rows.Next, which eventually calls http2.noDialH2RoundTripper.RoundTrip
      #20: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.pseudoHeaderError.Error
      #21: internal/files.go:46:24: internal.WriteAsGzippedNDJson calls gzip.Writer.Close, which eventually calls http2.stickyErrWriter.Write
      #22: internal/config.go:71:26: internal.EnvOverrides calls os.LookupEnv, which eventually calls http2.transportResponseBody.Close
      #23: cmd/snowflake-datalayer/main.go:35:15: snowflake.main calls common.ServiceRunner.StartAndWait, which eventually calls http2.transportResponseBody.Read
      #24: internal/snowflake_read.go:202:73: internal.entIter.Next calls fmt.Sprintf, which eventually calls http2.writeData.String

Your code is affected by 1 vulnerability from 1 module.