fix: go-license dependency and fixes for provenance/sbom tests.

[Shubhranshu153]

Testing if this fixes go-license issue.

[Shubhranshu153]

I have opened this PR: google/go-licenses#330 to update go-licenses package.

[Shubhranshu153]

Flaky Tests:

1. TestBuildAttestation/Provenance
2. TestNetworkInspect
3. Test in almalinux?

[Shubhranshu153]

@apostasie for networking i think there is some level of path concurrency or regex check for nat is happening. seems flaky so likely concurrency. what do you think?

[apostasie]

@apostasie for networking i think there is some level of path concurrency or regex check for nat is happening. seems flaky so likely concurrency. what do you think?

If something is flaky, we should list it in there: #4120
(there is a clearly a few related to networking, and generally Alma is a PITA)

BuiltAttestation is a bit more worrisome.

[Shubhranshu153]

For provenance and sbom they started adding platform info so needed a regex. its not flaky.

[Shubhranshu153]

@AkihiroSuda can i get an approval for this.
Still a bit flaky. Will record it in #4120

[apostasie]

@Shubhranshu153 thanks for taking care of this.

Maybe, ideally, we would have two separate commits? (one for go 1.24 compat, and the other one for build attestation change?)

Otherwise LGTM.

[Shubhranshu153]

Split the commits.

[AkihiroSuda]

Thanks