Fix CVEs

[Issacwww]

What type of PR is this?
CVE patch:

HIGH: CVE-2025-58187,CVE-2025-58188,CVE-2025-61723,CVE-2025-61725
MEDIUM: CVE-2025-58189,CVE-2025-58183,CVE-2025-58186,CVE-2025-61724,CVE-2025-47912,CVE-2025-58185

Testing done on this change:

CVE scan result

Report Summary

┌────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                     Target                                     │   Type   │ Vulnerabilities │ Secrets │
├────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ public.ecr.aws/eks/amazon-network-policy-controller-k8s:v1.0.2_amd64 (amazon 2 │  amazon  │        0        │    -    │
│ (Karoo))                                                                       │          │                 │         │
├────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ controller                                                                     │ gobinary │        0        │    -    │
├────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/local/bin/go-runner                                                        │ gobinary │        0        │    -    │
└────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[jaydeokar]

Lets plan carefully before bumping this up. Do we need this right now in this PR ?

[Issacwww]

there was a CI job failure, and this is fixing it.
are we good to override merge when ci bot not pass if we hold this not changed?