build(deps): Bump vulnerable dependencies (backport #15051)

[mergify]

This is an automatic backport of pull request #15051 done by Mergify.
Cherry-pick of 77d347b has failed:

On branch mergify/bp/release/v0.47.x/pr-15051
Your branch is up to date with 'origin/release/v0.47.x'.

You are currently cherry-picking commit 77d347b48.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add/rm <file>..." as appropriate to mark resolution)
	both modified:   .github/workflows/build.yml
	both modified:   .github/workflows/codeql-analysis.yml
	both modified:   .github/workflows/dependabot-update-all.yml
	both modified:   .github/workflows/dependencies-review.yml
	both modified:   .github/workflows/lint.yml
	deleted by us:   .github/workflows/release-confix.yml
	both modified:   .github/workflows/release-cosmovisor.yml
	both modified:   .github/workflows/release-rosetta.yml
	both modified:   .github/workflows/release.yml
	both modified:   .github/workflows/sims-045.yml
	both modified:   .github/workflows/sims-046.yml
	both modified:   .github/workflows/sims-047.yml
	both modified:   .github/workflows/sims-nightly.yml
	both modified:   .github/workflows/sims.yml
	both modified:   .github/workflows/test.yml
	both modified:   api/go.mod
	both modified:   api/go.sum
	both modified:   client/v2/go.mod
	both modified:   client/v2/go.sum
	deleted by us:   collections/go.mod
	deleted by us:   collections/go.sum
	both modified:   core/go.mod
	both modified:   core/go.sum
	both modified:   go.mod
	both modified:   go.sum
	both modified:   orm/go.mod
	both modified:   orm/go.sum
	both modified:   simapp/go.mod
	both modified:   simapp/go.sum
	deleted by us:   store/go.mod
	deleted by us:   store/go.sum
	both modified:   tests/go.mod
	both modified:   tests/go.sum
	deleted by us:   tools/confix/go.mod
	deleted by us:   tools/confix/go.sum
	both modified:   tools/cosmovisor/go.mod
	both modified:   tools/cosmovisor/go.sum
	deleted by us:   tools/hubl/go.mod
	deleted by us:   tools/hubl/go.sum
	both modified:   tools/rosetta/go.mod
	both modified:   tools/rosetta/go.sum
	both modified:   tx/go.sum
	deleted by us:   x/circuit/go.mod
	deleted by us:   x/circuit/go.sum
	deleted by us:   x/evidence/go.mod
	deleted by us:   x/evidence/go.sum
	deleted by us:   x/feegrant/go.mod
	deleted by us:   x/feegrant/go.sum
	deleted by us:   x/nft/go.mod
	deleted by us:   x/nft/go.sum
	deleted by us:   x/tx/go.mod
	deleted by us:   x/upgrade/go.mod
	deleted by us:   x/upgrade/go.sum

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

---

Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

• @Mergifyio refresh will re-evaluate the rules
• @Mergifyio rebase will rebase this PR on its base branch
• @Mergifyio update will merge the base branch into this PR
• @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

• look at your merge queues
• generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com

[julienrbrt]

Closing for now, upgrading this after the comet migration.

[julienrbrt]

Doing it already, as comet migration is blocked.

[julienrbrt]

tACK