More fixes for snyk reports

- Update golang to v1.25.5 to address as many CVEs as possible
- Fix more instances of path traversal vulnerabilities

Can't go beyond v1.25.5 right now because that's what OpenHPC is using to build
for openEuler.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>

MAINTAINING.md

@@ -147,3 +147,4 @@ by vote of the remaining TSC members.
 
 - On EL8, Go is installed using the `go-toolset` module from the
   appstream repository.
+- OpenHPC uses https://eur.openeuler.openatom.cn/coprs/openhpc/OpenHPC/packages/ to build for openEuler.