Five dependency bump PRs

[yonas]

Can these be merged?

• Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 #116
• Bump github.com/muesli/termenv from 0.15.1 to 0.15.2 #122
• Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.8.1 #127
• Bump golang.org/x/oauth2 from 0.7.0 to 0.11.0 #129
• Bump github.com/xanzy/go-gitlab from 0.83.0 to 0.90.0 #130