Bump golang.org/x/net to 0.57.0

Upstream bump for this is is done in containernetworking/plugins#1270
but no idea when they're gonna do a patch release.

Signed-off-by: Jussi Nummelin <jnummelin@mirantis.com>

Author: jnummelin

Dockerfile

@@ -1,6 +1,6 @@
 ARG \
   ALPINE_IMAGE=docker.io/library/alpine:3.24.1 \
-  GOLANG_IMAGE=docker.io/library/golang:1.26.4-alpine3.24 \
+  GOLANG_IMAGE=docker.io/library/golang:1.26.5-alpine3.24 \
   VERSION=1.9.1 \
   HASH=34bd82d47e981940751619c9cc44c095bb90bfcaf8d71865cbb822c37690a764
 
@@ -14,6 +14,11 @@ RUN --mount=type=tmpfs,target=/tmp \
   && { echo $HASH /tmp/sources.tar.gz | sha256sum -c -; } || { sha256sum /tmp/sources.tar.gz; exit 1; } \
   && tar xf /tmp/sources.tar.gz --strip-components=1
 
+# Patch some deps to silence CVE scanners
+RUN go mod edit -replace golang.org/x/net=golang.org/x/net@v0.57.0 \
+  && go mod tidy \
+  && go mod vendor 
+
 
 FROM sources AS bins
 ARG TARGETARCH SOURCE_DATE_EPOCH