Sec: Kitex Binding bump apache/thrift for CVE-2020-13949

[alicejgibbons]

Bump the version of go/apache/thrift to resolve the vulnerability: CVE-2020-13949

Version: 1.14.0+
Link: https://nvd.nist.gov/vuln/detail/cve-2020-13949
Go.mod:

components-contrib/go.mod

Line 41 in 35b77e0

github.com/apache/thrift v0.13.0

This is an indirect dependency of dapr/dapr here: https://github.com/dapr/dapr/blob/master/go.mod#L163