ROX-36083: Bump Go 1.26.5 and dependencies (release-2.39)

[janisz]

Summary

Bump Go from 1.26.3 to 1.26.5 and update golang.org/x/text, golang.org/x/net, google.golang.org/grpc, klauspost/compress to fix FedRAMP GovCloud CVEs (ROX-36081, ROX-36083).

CVEs fixed:

• CVE-2026-42504, CVE-2026-27145, CVE-2026-39822 (Go stdlib)
• CVE-2026-56852 (golang.org/x/text)
• CVE-2026-46600 (golang.org/x/net)
• GHSA-hrxh-6v49-42gf (google.golang.org/grpc)
• GHSA-259r-337f-4rfw (klauspost/compress)

Partially generated by AI.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[github-actions]

/retest scanner-slim-on-push

[openshift-ci]

@github-actions[bot]: The /retest command does not accept any targets.
The following commands are available to trigger optional jobs:

/test e2e-tests

/test slim-e2e-tests

Use /test all to run all jobs.

Details

In response to this:

/retest scanner-slim-on-push

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[github-actions]

/retest scanner-on-push

[openshift-ci]

@github-actions[bot]: The /retest command does not accept any targets.
The following commands are available to trigger optional jobs:

/test e2e-tests

/test slim-e2e-tests

Use /test all to run all jobs.

Details

In response to this:

/retest scanner-on-push

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.