Update GO version to match OPA version

[pratimsc]

The OPA Envoy Plugin fails due to CVEs present in G 1.22.5. Update it to Go version used by OPA i.e. 1.23.1, which has the required CVE fixes.

List of CVEs:

• CVE-2024-34155
• CVE-2024-34156
• CVE-2024-34158

[tjons]

@pratimsc I think it would be a good idea to bump the go.mod version here, can you add that?

[pratimsc]

@tjons - I have updated the version in go.mod file

[nfuden]

Does it make sense to add a ci check at some point to make sure the toolchain / mod version are the same as in .go-version?
After all go-version is used by the makefile.
Definitely out of scope for this just a (potentially) interesting thought

[pratimsc]

Does it make sense to add a ci check at some point to make sure the toolchain / mod version are the same as in .go-version? After all go-version is used by the makefile. Definitely out of scope for this just a (potentially) interesting thought

@nfuden - It will be good idea to put in the check, and also another check to use the same version of Go as the opa itself. So we have consistency across the opa and envoy-plugin.

Is the present PR good to merge?

[tjons]

@pratimsc neither @nfuden nor I are maintainers, I'm just a contributor. cc @ashutosh-narkar to review.

[ashutosh-narkar]

LGTM