Update Go toolchain version to 1.24.9

Update Go toolchain version to 1.24.9 to pickup updates
to the stdlib and also fixes to CVE-2025-58186
which affects Golang's net/http package.

Signed-off-by: Raymond Etornam <retornam@users.noreply.github.com>

Author: retornam

.github/workflows/deps.yml

@@ -42,10 +42,10 @@ jobs:
       - id: govulncheck
         uses: golang/govulncheck-action@v1
         with:
-          go-version-input: 1.24.4
+          go-version-input: 1.24.9
           go-version-file: go.mod
       - id: govulncheck-tests-e2e
         uses: golang/govulncheck-action@v1
         with:
-          go-version-input: 1.24.4
+          go-version-input: 1.24.9
           go-version-file: tests/e2e/go.mod

.ko.yaml

@@ -1 +1 @@
-defaultBaseImage: registry.k8s.io/build-image/go-runner:v2.4.0-go1.24.7-bookworm.0
+defaultBaseImage: registry.k8s.io/build-image/go-runner:v2.4.0-go1.24.9-bookworm.0

Dockerfile

@@ -14,15 +14,15 @@
 ##                               BUILD ARGS                                   ##
 ################################################################################
 # This build arg allows the specification of a custom Golang image.
-ARG GOLANG_IMAGE=golang:1.24.7
+ARG GOLANG_IMAGE=golang:1.24.9
 
 # The distroless image on which the CPI manager image is built.
 #
 # Please do not use "latest". Explicit tags should be used to provide
 # deterministic builds. Follow what kubernetes uses to build
 # kube-controller-manager, for example for 1.23.x:
 # https://github.com/kubernetes/kubernetes/blob/release-1.24/build/common.sh#L94
-ARG DISTROLESS_IMAGE=registry.k8s.io/build-image/go-runner:v2.4.0-go1.24.7-bookworm.0
+ARG DISTROLESS_IMAGE=registry.k8s.io/build-image/go-runner:v2.4.0-go1.24.9-bookworm.0
 
 ################################################################################
 ##                              BUILD STAGE                                   ##

cloudbuild.yaml

@@ -17,7 +17,7 @@ steps:
       - --platform=linux/amd64,linux/arm64
       - .
   # Build cloudbuild artifacts (for attestation)
-  - name: 'docker.io/library/golang:1.24.7-bookworm'
+  - name: 'docker.io/library/golang:1.24.9-bookworm'
     id: cloudbuild-artifacts
     entrypoint: make
     env:

go.mod

@@ -1,6 +1,8 @@
 module k8s.io/cloud-provider-aws
 
-go 1.24.7
+go 1.24
+
+toolchain go1.24.9
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.36.5

tests/e2e/go.mod

@@ -1,6 +1,9 @@
 module k8s.io/cloud-provider-aws/tests/e2e
 
-go 1.24.7
+go 1.24
+
+toolchain go1.24.9
+
 
 require (
 	github.com/onsi/ginkgo/v2 v2.9.4