Include old golang.org/x/crypto package with CRITICAL CVE-2024-45337 in v1.9.3

[cmontemuino]

Describe the bug

Summary from Trivy scan:

Vulnerability information: 
+--------------------------------+-----------------------------+----------+-------------------+---------------+----------------------------------------------------------------------------+--------------------------------------------+
|              Type              |           Library           | Severity | Installed Version | Fixed Version |                                  Summary                                   |                More Details                |
+--------------------------------+-----------------------------+----------+-------------------+---------------+----------------------------------------------------------------------------+--------------------------------------------+
|  bin/argo-events (gobinary)    | golang.org/x/crypto (None)  | CRITICAL |      v0.29.0      |     0.31.0    | Applications and libraries which misuse the ServerConfig.PublicKeyCall ... | https://avd.aquasec.com/nvd/cve-2024-45337 |
| usr/local/bin/argo (gobinary)  | golang.org/x/crypto (None)  | CRITICAL |      v0.24.0      |     0.31.0    | Applications and libraries which misuse the ServerConfig.PublicKeyCall ... | https://avd.aquasec.com/nvd/cve-2024-45337 |
+--------------------------------+-----------------------------+----------+-------------------+---------------+----------------------------------------------------------------------------+--------------------------------------------+

To Reproduce

N/A

Expected behavior

No CRITICAL vulnerabilities found,

Screenshots
N/A

Environment (please complete the following information):

• Argo Events: v1.9.3

Additional context
N/A

---

Message from the maintainers:

If you wish to see this enhancement implemented please add a 👍 reaction to this issue! We often sort issues this way to know what to prioritize.

[cmontemuino]

The package has been upgraded in #3390

Would it be possible to release v1.9.4 as a security patch?

[whynowy]

Fixed in argo-events binary, but no argo binary available yet.

[github-actions]

This issue has been automatically marked as stale because it has not had
any activity in the last 60 days. It will be closed if no further activity
occurs. Thank you for your contributions.