MM-39315: Bump dependencies (#19039)

Note: We keep splitio/go-client untouched
because the dependency is broken.

See https://github.com/mattermost/mattermost-server/pull/18604

```release-note
NONE
```

vendor/github.com/dsnet/compress/go.mod

@@ -4,7 +4,8 @@ go 1.9
 
 require (
 	github.com/dsnet/golib v0.0.0-20171103203638-1ea166775780
+	github.com/google/go-cmp v0.5.5 // indirect
 	github.com/klauspost/compress v1.4.1
 	github.com/klauspost/cpuid v1.2.0 // indirect
-	github.com/ulikunitz/xz v0.5.6
+	github.com/ulikunitz/xz v0.5.8
 )