Vulnerability of dependency "golang.org/x/text" about afero

[jxsl13]

if this library does not bump its dependency, you could at least do a hotfix and manually bump that indirect dependency to 0.3.8 in your project.

[pjonsson]

@Silence-worker-02 is this a duplicate of #381?

[Silence-worker-02]

Yeah, but now the question is still exist. In the latest commit, go.mod still used golang.org/x/text 0.3.7. The fix commit was not merge to the master.