build: update scripts go.(mod|sum) (#19834)

* build: update scripts go.(mod|sum)

* build: exclude gosec rule G108

Gosec rule G108: Profiling endpoint automatically exposed on /debug/pprof
is not applicable since we only enable /debug/pprof endpoint if -profile
flag is provided when starting grafana.

Makefile

@@ -96,7 +96,7 @@ revive-alerting: scripts/go/bin/revive
 gosec: scripts/go/bin/gosec
 	@echo "lint via gosec"
 	@scripts/go/bin/gosec -quiet \
-		-exclude=G104,G107,G201,G202,G204,G301,G304,G401,G402,G501 \
+		-exclude=G104,G107,G108,G201,G202,G204,G301,G304,G401,G402,G501 \
 		-conf=./scripts/go/configs/gosec.json \
 		$(GO_FILES)
 

scripts/go/go.mod

@@ -3,12 +3,13 @@ module github.com/grafana/grafana/scripts/go
 go 1.13
 
 require (
-	github.com/golangci/golangci-lint 7577d548a3893f86cb9aa479b88c52ff5d437893
+	github.com/golangci/golangci-lint v1.20.0
 	github.com/mgechev/revive v0.0.0-20190917153825-40564c5052ae
-	github.com/securego/gosec v0.0.0-20190912120752-140048b2a218
+	github.com/securego/gosec v0.0.0-20191002120514-e680875ea14d
 	github.com/unknwon/bra v0.0.0-20190805204333-bb0929b6cca0
 	github.com/unknwon/com v1.0.1 // indirect
 	github.com/unknwon/log v0.0.0-20150304194804-e617c87089d3 // indirect
 	github.com/urfave/cli v1.20.0 // indirect
+	golang.org/x/tools v0.0.0-20191015150414-f936694f27bf // indirect
 	gopkg.in/fsnotify/fsnotify.v1 v1.4.7 // indirect
 )