[24.0 backport] update go to go1.20.6

[thaJeztah]

• backport update go to go1.20.6 #4421
• depends on [24.0] vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc #4426
• relates to Golang client fails to attach to streams with "http: invalid Host header" with go1.20.6, go1.19.11 moby/moby#45935

go1.20.6 (released 2023-07-11) includes a security fix to the net/http package, as well as bug fixes to the compiler, cgo, the cover tool, the go command, the runtime, and the crypto/ecdsa, go/build, go/printer, net/mail, and text/template packages. See the Go 1.20.6 milestone on our issue tracker for details.

https://github.com/golang/go/issues?q=milestone%3AGo1.20.6+label%3ACherryPickApproved

Full diff: golang/go@go1.20.5...go1.20.6

These minor releases include 1 security fixes following the security policy:

net/http: insufficient sanitization of Host header

The HTTP/1 client did not fully validate the contents of the Host header. A maliciously crafted Host header could inject additional headers or entire requests. The HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.

Thanks to Bartek Nowotarski for reporting this issue.

Includes security fixes for CVE-2023-29406 and Go issue https://go.dev/issue/60374

(cherry picked from commit 680fafd)

- What I did

- How I did it

- How to verify it

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

[codecov-commenter]

Codecov Report

Merging #4428 (f4782b3) into 24.0 (a502466) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files

@@ Coverage Diff @@## 24.0 #4428 +/- ##
=======================================
Coverage 59.29% 59.29% =======================================
Files 288 288 Lines 24804 24804 =======================================
Hits 14707 14707 Misses 9211 9211 Partials 886 886 

[thaJeztah]

I'll bring this one in once CI completes, but there may be a small follow-up; #4421 (comment)