Backport of suppressing alpine CVEs as there is no fix yet into release/1.21.x (#22281)

* Backport of CVE Fix into release/1.21.x (#22269)

* backport of commit 73c592c

* CVE Fix (#22268)

* Fixed following CVEs:
GHSA-vvgc-356p-c3xw in golang.org/x/[email protected]
GO-2025-3595 in golang.org/x/[email protected]
GO-2025-3553 in github.com/golang-jwt/jwt/[email protected]
GHSA-mh63-6h87-95cp in github.com/golang-jwt/jwt/[email protected]
stdlib in Go [email protected]

* added changelog

(cherry picked from commit 519fb0a)

---------

Co-authored-by: nitin.sachdev <[email protected]>

* Backport of Upgraded go to 1.23.8 into release/1.21.x (#22274)

* backport of commit cedded6

* backport of commit dd4f628

---------

Co-authored-by: nitin.sachdev <[email protected]>

* backport of commit 5d7f3ee

---------

Co-authored-by: hc-github-team-consul-core <[email protected]>

Author: nitin-sachdev-29

.release/security-scan.hcl

@@ -39,7 +39,14 @@ container {
 			vulnerabilities = [
 				"CVE-2024-4067", # libsolv@0:0.7.24-3.el9
 				"CVE-2019-12900", # bzip2-libs@0:1.0.8-8.el9
-				"CVE-2024-12797" # openssl-libs@1:3.2.2-6.el9_5
+				"CVE-2024-12797", # openssl-libs@1:3.2.2-6.el9_5
+				"CVE-2024-53427", # [email protected]
+				"CVE-2025-31498", # [email protected]
+				"CVE-2025-30258", # [email protected]
+				"CVE-2025-31498", # [email protected]
+				"CVE-2025-30258", #  [email protected]
+				"CVE-2024-53427", # [email protected]
+				"CVE-2022-49043" # libxml2@0:2.9.13-6.el9_5.2
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",