v2.39.1-p1: cherry-pick from master bump to go 1.23.8, oauth2 0.29.0, golangci-lint 1.64.8, mysql 8.4, remove dependency-review action, and use go-version-file in ci#26