bump golang.org/x/net to 0.17 to fix CVE-2023-39325

[joelsmith]

Fix GO-2023-2102 / CVE-2023-39325

$ go get golang.org/x/[email protected]
$ go mod tidy
$ go mod vendor

Before:

$ make adapter
...
$ govulncheck  --mode=binary bin/keda-adapter 
Scanning your binary for known vulnerabilities...

Vulnerability #1: GO-2023-2102
    HTTP/2 rapid reset can cause excessive work in net/http
  More info: https://pkg.go.dev/vuln/GO-2023-2102
  Module: golang.org/x/net
    Found in: golang.org/x/[email protected]
    Fixed in: golang.org/x/[email protected]
    Example traces found:
      #1: http2.Server.ServeConn

Your code is affected by 1 vulnerability from 1 module.

Share feedback at https://go.dev/s/govulncheck-feedback.

After:

$ make adapter
...
$ govulncheck  --mode=binary bin/keda-adapter 
Scanning your binary for known vulnerabilities...

No vulnerabilities found.

Share feedback at https://go.dev/s/govulncheck-feedback.

Checklist

• Changelog has been updated and is aligned with our changelog requirements
• Commits are signed with Developer Certificate of Origin (DCO - learn more)

[github-actions]

Thank you for your contribution! 🙏 We will review your PR as soon as possible.

While you are waiting, make sure to:

• Add an entry in our changelog in alphabetical order and link related issue
• Update the documentation, if needed
• Add unit & e2e tests for your changes
• GitHub checks are passing
• Is the DCO check failing? Here is how you can fix DCO issues

Learn more about:

• Our contribution guide

[JorTurFer]

/run-e2e internal
Update: You can check the progress here

[JorTurFer]

/run-e2e scaling_modifiers_test
Update: You can check the progress here

[zroubalik]

/run-e2e scaling_modifiers_test
Update: You can check the progress here