some bug fixes

What's Changed

• sync: fix inconsistent test by @peusebiu in #415
• tls: restrict tls cipher suites by @rchincha in #435
• CVE-2022-23649: fix dependabot alert by @rchincha in #431
• remove linger go.sum entries to fix dependabot alert by @rchincha in #437

Full Changelog: v1.3.8...v1.3.9