Vulnerable transitive dependency: github.com/moby/go-archive < v0.3.0

clickhouse-go v2.48.0 resolves `github.com/moby/go-archive` to v0.2.0, which is affected by a path traversal vulnerability.

**Advisory:** https://github.com/advisories/GHSA-hfg8-hc9c-6c3h
**Fixed in:** v0.3.0

**Steps:**
```bash
go get github.com/ClickHouse/clickhouse-go/v2@latest
go mod graph | grep "go-archive"
# github.com/ClickHouse/clickhouse-go/v2@v2.48.0 github.com/moby/go-archive@v0.2.0
```

**Request:** Please bump `github.com/moby/go-archive` to >= v0.3.0.

Run the issue's go get command, then use go mod graph | grep "go-archive" to inspect the resolved version. Update the dependency so github.com/moby/go-archive resolves to v0.3.0 or newer, and verify the module graph no longer selects v0.2.0.

Written by the indexing model from the issue text.