Update a number of dependencies (incl. CVE fixes)

[its-josh4]

Includes some dependencies that were upgraded in #4106 as well as a few more dependencies.

Some deps that have been upgraded had CVEs.

Notably, upgrades deprecated dependencies such as:

• github.com/go-chi/chi (replaced with /v5)
• github.com/gofrs/uuid (replaced with /v5)
• github.com/hashicorp/golang-lru (replaced with /v2 which uses generics)

Fixes #3733

[DingDongSoLong4]

I'm running into a few issues with the yaml upgrade.

If you clone the CommunityScrapers repo and set your scraper path to that, you'll get a "did not find expected key" error for both the Babepedia.yml and Hotmovies.yml scrapers. I've managed to figure out what was causing the message: the parser seems to be choking on a string input of "\n\n{other chars}" (not "\n\n", it deals with that fine). The problematic lines are here in Babepedia.yml and here in Hotmovies.yml. If you get rid of the \n characters on those lines, the error goes away.

There are a couple issues on the https://github.com/go-yaml/yaml repo relating to newline issues, and many of them are quite old. I have a feeling we're going to have to fix the bug ourselves, or find a non-broken version to use.

[its-josh4]

I can downgrade the YAML library

[DingDongSoLong4]

@its-josh4 I think that's the best option for now yes. v2.4.0 seems to be the latest version that doesn't have this issue, and it is the version we were on previously as well.

[DingDongSoLong4]

@its-josh4 I believe the last line in go.mod (replace git.apache.org/thrift.git ...) can be removed - it doesn't appear to be doing anything anymore.

[its-josh4]

@DingDongSoLong4 updated as you requested. Reverted the YAML library to v2, and removed the unnecessary replacement in go.mod (also fixed merge conflicts)

[DingDongSoLong4]

@its-josh4 If you wouldn't mind, can you also upgrade vearutop/statigz to 1.4.0? I've had this upgrade on my local branch adding brotli compression for ages with no issues. It shouldn't require any code changes.

[its-josh4]

@its-josh4 If you wouldn't mind, can you also upgrade vearutop/statigz to 1.4.0? I've had this upgrade on my local branch adding brotli compression for ages with no issues. It shouldn't require any code changes.

Done. Maybe this PR could be merged and other deps can be updated separately?