Go FIPS v1.22.0

[sergio-chainguard]

Fixes:

Related:

Pre-review Checklist

For new package PRs only

• This PR is marked as fixing a pre-existing package request bug
  • Alternatively, the PR is marked as related to a pre-existing package request bug, such as a dependency
• REQUIRED - The package is available under an OSI-approved or FSF-approved license
• REQUIRED - The version of the package is still receiving security updates
• This PR links to the upstream project's support policy (e.g. endoflife.date)

For new version streams

• The upstream project actually supports multiple concurrent versions.
• Any subpackages include the version string in their package name (e.g. name: ${{package.name}}-compat)
• The package (and subpackages) provides: logical unversioned forms of the package (e.g. nodejs, nodejs-lts)

For security-related PRs

• The security fix is recorded in the advisories repo

For version bump PRs

• [ X] The epoch field is reset to 0

For PRs that add patches

• Patch source is documented

[xnox]

How does this packaging pull in latest golang-fips patches from https://github.com/golang-fips/go ?

[ajayk]

we are waiting on golang-fips/go#160

[rawlingsj]

This change will require further discussion to ensure we properly handle fips. Closing for now.