fix CVEs kubeflow-pipelines

Signed-off-by: mauricio-dc-chainguard <mauricio.diazcernas@chainguard.dev>

kubeflow-pipelines.yaml

@@ -46,6 +46,10 @@ pipeline:
       repository: https://github.com/kubeflow/pipelines
       tag: ${{package.version}}
       expected-commit: f328f0b588c35cdf1e5b31638fbe3596b2f38413
+
+    #Fix idna CVE
+  - runs: |
+      sed -i 's/idna==3\.4/idna==3.7/g' backend/requirements.txt
 
   - uses: go/bump
     with:
@@ -83,7 +87,7 @@ subpackages:
     pipeline:
       - uses: go/bump
         with:
-          deps: golang.org/x/net@v0.17.0 golang.org/x/crypto@v0.17.0
+          deps: golang.org/x/net@v0.23.0 golang.org/x/crypto@v0.21.0 k8s.io/kubernetes@v1.27.13
           modroot: .
       - runs: |
           cd backend