[v1.41] Bump golang and k8s patch releases; Use UBI9 base and pin to the latest calico/base; Bump Go to v1.25.6 and update dependencies

[alexh-tigera]

Cherry-pick history

• Pick onto release-v1.41:
  • Bump golang and k8s patch releases #4348
  • Use UBI9 base and pin to the latest calico/base #4365
  • Bump Go to v1.25.6 and update dependencies #4377

---

Bump golang and k8s patch releases (#4348)

Description

This change bumps the golang and k8s patch releases to the latest.

Release Note

TBD

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.

---

Use UBI9 base and pin to the latest calico/base (#4365)

Description

This change updates the Tigera operator runtime base to UBI 9 and pins calico/base to the latest version. It also fixes the shared library path to /lib64, which is the canonical runtime location for shared libraries on RHEL systems.

Release Note

Updated the Tigera Operator runtime base image to UBI 9.

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.

---

Bump Go to v1.25.6 and update dependencies (#4377)

Description

Update Go to v1.25.6 and update dependencies.

Also fixes dependabot alerts:

• https://github.com/tigera/operator/security/dependabot/19
• https://github.com/tigera/operator/security/dependabot/20
• https://github.com/tigera/operator/security/dependabot/21
• https://github.com/tigera/operator/security/dependabot/22
• https://github.com/tigera/operator/security/dependabot/25

Release Note

TBD

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.

[rene-dekker]

/merge-when-ready

[marvin-tigera]

OK, I will merge the pull request when it's ready, leave the commits as is when I merge it, and leave the branch after I've merged it.

[hjiawei]

Pick prometheus stack updates from master to 1.41 release branch in #4397.