Update deps required to build with go1.24-27093581

[dveeden]

What problem does this PR solve?

Issue Number: close #813 ref #819

Also resolves https://github.com/pingcap/tidb-tools/security/dependabot/28

What is changed and how it works?

Check List

Tests

• Manual test (add detailed scripts or steps below)

[wuhuizuo]

See the beautiful fix in tidb.
The fix is ​​more elegant. The main thing here is to update the version of the tidb dependency. This change is forward compatible with the golang version: the runtime.Version() method exists at least in go 1.0.0.

[wuhuizuo]

should we upgrade it in another PR, also for github.com/BurntSushi/toml.

[dveeden]

So for grpc and toml you want separate PR's?

[wuhuizuo]

Yes, I recommend keeping it single-purpose

So for grpc and toml you want separate PR's?

[dveeden]

dvaneeden@dve-carbon:~/dev/pingcap/tidb-tools$ govulncheck ./...
=== Symbol Results ===

Vulnerability #1: GO-2024-2918
    Azure Identity Libraries Elevation of Privilege Vulnerability in
    github.com/Azure/azure-sdk-for-go/sdk/azidentity
  More info: https://pkg.go.dev/vuln/GO-2024-2918
  Module: github.com/Azure/azure-sdk-for-go/sdk/azidentity
    Found in: github.com/Azure/azure-sdk-for-go/sdk/[email protected]
    Fixed in: github.com/Azure/azure-sdk-for-go/sdk/[email protected]
    Example traces found:
      #1: pkg/utils/util.go:50:30: utils.GetJSON calls ioutil.ReadAll, which eventually calls azidentity.ClientSecretCredential.GetToken

Your code is affected by 1 vulnerability from 1 module.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.

[ti-chi-bot]

[LGTM Timeline notifier]

Timeline:

• 2024-11-22 14:01:46.482087904 +0000 UTC m=+213094.101742420: ☑️ agreed by Defined2014.

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Defined2014, mjonss

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Defined2014,mjonss]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment