chore: update go to 1.24.9 to fix CVEs

[weng271190436]

What type of PR is this?

/kind bug

What this PR does / why we need it:

Fix 10 new CVEs from 10/29

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬────────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ stdlib │ GHSA-447v-2qg4-h8hc │ HIGH │ fixed │ v1.24.6 │ 1.24.8, 1.25.2 │ The Parse function permits values other than IPv6 addresses │
│ │ │ │ │ │ │ to be incl... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-47912 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-9gcr-gp5f-jw27 │ │ │ │ │ tar.Reader does not set a maximum size on the number of │
│ │ │ │ │ │ │ sparse... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58183 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-jwmf-chvc-rf92 │ │ │ │ │ Parsing a maliciously crafted DER payload could allocate │
│ │ │ │ │ │ │ large amounts ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58185 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-rjcg-56ph-3qvg │ │ │ │ │ Despite HTTP headers having a default limit of 1MB, the │
│ │ │ │ │ │ │ number of... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58186 │
│ ├────────────────┤ │ │ ├────────────────┼──────────────────────────────────────────────────────────────┤
│ │ GHSA-frhw-mqj2-wxw2 │ │ │ │ 1.24.9, 1.25.3 │ Due to the design of the name constraint checking algorithm, │
│ │ │ │ │ │ │ the proce... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58187 │
│ ├────────────────┤ │ │ ├────────────────┼──────────────────────────────────────────────────────────────┤
│ │ GHSA-7wwx-xj66-r44x │ │ │ │ 1.24.8, 1.25.2 │ Validating certificate chains which contain DSA public keys │
│ │ │ │ │ │ │ can cause ...... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58188 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-cxq7-xw9v-rcv3 │ │ │ │ │ When Conn.Handshake fails during ALPN negotiation the error │
│ │ │ │ │ │ │ contains a ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-58189 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-hjx7-fpxx-mj48 │ │ │ │ │ The processing time for parsing some invalid inputs scales │
│ │ │ │ │ │ │ non-linearl ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-61723 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-wcw9-47fp-rrfr │ │ │ │ │ The Reader.ReadResponse function constructs a response │
│ │ │ │ │ │ │ string through ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-61724 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ GHSA-qh38-484v-w52x │ │ │ │ │ The ParseAddress function constructeds domain-literal │
│ │ │ │ │ │ │ address componen ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-61725 │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴────────────────┴──────────────────────────────────────────────────────────────┘

Which issue(s) this PR fixes:

Fixes #

Requirements:

• run make reviewable for basic local test
• Read and followed fleet-networking's Code of conduct.
• uses conventional commit messages
• includes documentation
• adds unit tests

How has this code been tested

Special notes for your reviewer

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.90%. Comparing base (56bdada) to head (56ff4e5).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #346      +/-   ##
==========================================
- Coverage   67.06%   66.90%   -0.16%     
==========================================
  Files          33       33              
  Lines        3786     3786              
==========================================
- Hits         2539     2533       -6     
- Misses       1071     1077       +6     
  Partials      176      176              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.