[release-v0.14] Backport CVE-2025-22869 changes to v0.14 from v0.15; Update go to 1.23.0 from 1.22.0 to support x/crypto 0.35

[release-v0.14] Backport CVE-2025-22869 changes to v0.14 from v0.15; Update go to 1.23.0 from 1.22.0 to support x/crypto 0.35 #3921