owner 1147513 ! thanks Hi.
I will take care of upgrading the package this afternoon. Three of its reverse build-dependencies fail to build, but they already failed before, so that does not count as a regression. Additionally, golang-github-newrelic-go-agent now fails to build randomly, but on the other side, it has a new upstream version available. So, I think that's a more than acceptable tradeoff while fixing a CVE. (Thanks, Andrew, for your encouragement :-) Thanks.

