[7.x](backport #26406) Update dependent package to avoid downloading a suspicious file

[mergify]

This is an automatic backport of pull request #26406 done by Mergify.
Cherry-pick of 127e3c6 has failed:

On branch mergify/bp/7.x/pr-26406
Your branch is up to date with 'origin/7.x'.

You are currently cherry-picking commit 127e3c6f7.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   NOTICE.txt
	modified:   go.mod

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   go.sum

To fix up this pull request, you can check it out locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

---

Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

• @Mergifyio refresh will re-evaluate the rules
• @Mergifyio rebase will rebase this PR on its base branch
• @Mergifyio update will merge the base branch into this PR
• @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

• look at your merge queues
• generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.io/

[botelastic]

This pull request doesn't have a Team:<team> label.

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2021-07-28T14:43:16.343+0000

• Duration: 214 min 33 sec

• Commit: 4f71075

Test stats 🧪

Test	Results
Failed	0
Passed	48990
Skipped	5233
Total	54223

Trends 🧪

💚 Flaky test report

Tests succeeded.

Expand to view the summary

Test stats 🧪

Test	Results
Failed	0
Passed	48990
Skipped	5233
Total	54223

[kaiyan-sheng]

@blakerouse Seems like there is a merge conflict here. Could you resolve it and merge this backport please? TIA!!

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b mergify/bp/7.x/pr-26406 upstream/mergify/bp/7.x/pr-26406
git merge upstream/7.x
git push upstream mergify/bp/7.x/pr-26406