Release edge node agents with go 1.24.9

[rranjan3]

• use golang 1.24.9 in all agents
• Fix CVE-2025-47913

Merge Checklist

All boxes should be checked before merging the PR

• The changes in the PR have been built and tested
• cgmanifest file has been updated if required
• Ready to merge

Description

Any Newly Introduced Dependencies

How Has This Been Tested?

[aaroncyew]

CVE-2025-47913 fix will depends on #594 to be merged before we can proceed to resolve the ssh-agent fixes.

[rranjan3]

Able to provision EN & create cluster on it

[rranjan3]

[aaroncyew]

Automated Messages: Label 'platform-manageability-agent' has been added to this Pull Request.

[aaroncyew]

Automated Messages: Label 'reporting-agent' has been added to this Pull Request.

[aaroncyew]

@rranjan3 The package build tests for platform-manageability-agent & reporting-agent is PASSED
other package tests for cluster-agent, hardware-discovery-agent, node-agent, platform-telemetry-agent, platform-update-agent are FAILED to build SRPMs.

Vulnerabilities for reporting-agent: CVE-2025-47913, CVE-2025-47914, CVE-2025-58181
No vulnerabilities reported for platform-manageability-agent, however the undetected version require mitigations

Details will be updated in issue ticket(s) for each agents

[cheeyanglee]

@rranjan3 The package build tests for platform-manageability-agent & reporting-agent is PASSED other package tests for cluster-agent, hardware-discovery-agent, node-agent, platform-telemetry-agent, platform-update-agent are FAILED to build SRPMs.

Vulnerabilities for reporting-agent: CVE-2025-47913, CVE-2025-47914, CVE-2025-58181 No vulnerabilities reported for platform-manageability-agent, however the undetected version require mitigations

Details will be updated in issue ticket(s) for each agents

@aaroncyew build is working with #1275.
do you mean reporting agent does not fix for CVE-2025-47914 and CVE-2025-58181 ?

[aaroncyew]

CVE-2025-47913 is fixed for platform-manageability-agent but not for reporting-agent