update golang crypto to 0.31.0

[kannon92]

What type of PR is this?

/kind bug

What this PR does / why we need it:

CVE scanners are flagging this now.

golang/go#70779

CVE-2024-45337

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?

NONE

[netlify]

✅ Deploy Preview for kubernetes-sigs-kueue ready!

Name	Link
🔨 Latest commit	da61f77
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-sigs-kueue/deploys/675b48cee65bd700086eaefa
😎 Deploy Preview	https://deploy-preview-3825--kubernetes-sigs-kueue.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[kannon92]

/hold

Going to test kueue-viz first.

[kannon92]

hmm. I am having trouble getting kueue-viz to work without this PR on latest main.

[kannon92]

okay. I think that was just user error.

/hold cancel

[mimowo]

/lgtm
/approve
Thank you!

[k8s-ci-robot]

LGTM label has been added.

Git tree hash: 8bf99a50663b7d1e2811fa927717bf424bf8201a

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kannon92, mimowo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [mimowo]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[mimowo]

/cherry-pick release-0.9 release-0.8
As a security fix I'm including it on both release branches.

[k8s-infra-cherrypick-robot]

@mimowo: once the present PR merges, I will cherry-pick it on top of release-0.9 in a new PR and assign it to you.

In response to this:

/cherry-pick release-0.9 release-0.8
As a security fix I'm including it on both release branches.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[k8s-infra-cherrypick-robot]

@mimowo: #3825 failed to apply on top of branch "release-0.9":

Applying: update golang crypto to 0.31.0
Using index info to reconstruct a base tree...
A	cmd/experimental/kueue-viz/backend/go.mod
A	cmd/experimental/kueue-viz/backend/go.sum
M	go.mod
M	go.sum
M	hack/internal/tools/go.mod
M	hack/internal/tools/go.sum
M	vendor/modules.txt
Falling back to patching base and 3-way merge...
Auto-merging vendor/modules.txt
Auto-merging hack/internal/tools/go.sum
CONFLICT (content): Merge conflict in hack/internal/tools/go.sum
Auto-merging hack/internal/tools/go.mod
CONFLICT (content): Merge conflict in hack/internal/tools/go.mod
Auto-merging go.sum
CONFLICT (content): Merge conflict in go.sum
Auto-merging go.mod
CONFLICT (content): Merge conflict in go.mod
CONFLICT (modify/delete): cmd/experimental/kueue-viz/backend/go.sum deleted in HEAD and modified in update golang crypto to 0.31.0. Version update golang crypto to 0.31.0 of cmd/experimental/kueue-viz/backend/go.sum left in tree.
CONFLICT (modify/delete): cmd/experimental/kueue-viz/backend/go.mod deleted in HEAD and modified in update golang crypto to 0.31.0. Version update golang crypto to 0.31.0 of cmd/experimental/kueue-viz/backend/go.mod left in tree.
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 update golang crypto to 0.31.0

In response to this:

/cherry-pick release-0.9 release-0.8
As a security fix I'm including it on both release branches.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[mimowo]

@kannon92 please prepare the cherry-picks