This bumps the version of testify and go.yaml that are referenced by go-hclog to fix a security issue in go.yaml.