Main reason is to pick up updated CA roots. Full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.19.0