fix: upgrade go and dependencies to fix CVEs

[liliu-z]

pr: #40940

issue : #40933

[mergify]

@liliu-z Please associate the related pr of master to the body of your Pull Request. (eg. “pr: #”)

[sre-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: liliu-z

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [liliu-z]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[mergify]

@liliu-z go-sdk check failed, comment rerun go-sdk can trigger the job again.

[mergify]

@liliu-z E2e jenkins job failed, comment /run-cpu-e2e can trigger the job again.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 70.67%. Comparing base (b3d3a26) to head (a53bbda).
Report is 1 commits behind head on 2.5.

❌ Your project check has failed because the head coverage (70.67%) is below the target coverage (77.00%). You can increase the head coverage or adjust the target coverage.

❗ There is a different number of reports uploaded between BASE (b3d3a26) and HEAD (a53bbda). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (b3d3a26)	HEAD (a53bbda)
	2	1

Additional details and impacted files

@@             Coverage Diff             @@
##              2.5   #41255       +/-   ##
===========================================
- Coverage   80.85%   70.67%   -10.18%     
===========================================
  Files        1421      307     -1114     
  Lines      203230    29728   -173502     
===========================================
- Hits       164325    21011   -143314     
+ Misses      33142     8717    -24425     
+ Partials     5763        0     -5763     

Components	Coverage Δ
Client	∅ <ø> (∅)
Core	70.67% <ø> (+0.02%)	⬆️
Go	∅ <ø> (∅)

see 1120 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[mergify]

@liliu-z E2e jenkins job failed, comment /run-cpu-e2e can trigger the job again.

[mergify]

@liliu-z go-sdk check failed, comment rerun go-sdk can trigger the job again.