fix: bump go version to fix CVEs

[SebastienSyd]

bump go version to at least 1.24.8 to fix CVEs

❯ grype reg.echohq.com/kubebuilder-kube-rbac-proxy:v0.20.0-mini

NAME    INSTALLED  FIXED IN        TYPE       VULNERABILITY   SEVERITY  EPSS           RISK
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-61723  High      < 0.1% (21st)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-61725  High      < 0.1% (21st)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-58186  Medium    < 0.1% (15th)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-61724  Medium    < 0.1% (15th)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-47912  Medium    < 0.1% (15th)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-58188  High      < 0.1% (7th)   < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-58189  Medium    < 0.1% (10th)  < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-58185  Medium    < 0.1% (5th)   < 0.1
stdlib  go1.25.1   1.24.9, 1.25.3  go-module  CVE-2025-58187  High      < 0.1% (2nd)   < 0.1
stdlib  go1.25.1   1.24.8, 1.25.2  go-module  CVE-2025-58183  Medium    < 0.1% (2nd)   < 0.1

[SebastienSyd]

cc. @ibihim

[ibihim]

Sorry, I was busy upstream. I will create a new release tomorrow. Thank you @SebastienSyd!

[ibihim]

Feel free to ping @stlaz or @ibihim on Kuberntes Slack, if we don't respond within 24 hours on an urgent issue.

[ibihim]

@SebastienSyd, the Golang version in the go.mod indicates the minimal expected Golang version to be build the project. The Golang version is being set in https://github.com/brancz/kube-rbac-proxy/blob/master/.github/workflows/build.yml#L8.

When we build a new release in order to fix this #401, we indirectly will ship with the highest available Golang v1.25 version.

Even though it has no impact on the image we ship, we can merge the PR in case that someone wants to build this project with Golang v1.24, they should use the minimal version that has no vulnerabilities.

[SebastienSyd]

thanks @ibihim for the details