move from go-git.v4 to go-git.v5

[ajayk]

Moves from unmaintained go-git.v4 to go-git.v5 and as the go-git.v4 has a critical CVE https://pkg.go.dev/vuln/GO-2024-2466

and updates golang.org/x/net and x/crypto and circl to latest versions bunch of cve's reported in older versions