Drop archived vendored libraries and switch to active ones

[dims]

• github.com/google/gofuzz (Archived Jan 10, 2024)
• github.com/google/shlex (Archived Dec 29, 2022)
• github.com/gregjones/httpcache (Archived Apr 20, 2023)
• github.com/grpc-ecosystem/go-grpc-prometheus (Archived Apr 18, 2023, Alternative - https://github.com/grpc-ecosystem/go-grpc-middleware/tree/main/providers/prometheus)
• github.com/pkg/errors (Archived Dec 1, 2021, Switch to golang errors)

Follow up to #120276

[k8s-ci-robot]

This issue is currently awaiting triage.

If a SIG or subproject determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dims]

"github.com/grpc-ecosystem/go-grpc-prometheus" is only from etcd.

Search query: https://cs.k8s.io/?q=github.com%2Fgrpc-ecosystem%2Fgo-grpc-prometheus&i=nope&files=%5C.go&excludeFiles=&repos=kubernetes/kubernetes

issue already filed xref - etcd-io/etcd#17883

[dims]

"github.com/pkg/errors" is there in our code, so we should deal with it first. There are lots of hits in kubeadm ( cc @pacoxu and @neolit123 )

https://cs.k8s.io/?q=%22github.com%2Fpkg%2Ferrors&i=nope&files=%5C.go&excludeFiles=vendor&repos=kubernetes/kubernetes

[dims]

shlex seems to be only from kustomize:

❯ rg "google/shlex" | grep "\.go"
vendor/sigs.k8s.io/kustomize/api/internal/plugins/execplugin/execplugin.go:	"github.com/google/shlex"

[neolit123]

"github.com/pkg/errors" is there in our code, so we should deal with it first. There are lots of hits in kubeadm ( cc @pacoxu and @neolit123 )

https://cs.k8s.io/?q=%22github.com%2Fpkg%2Ferrors&i=nope&files=%5C.go&excludeFiles=vendor&repos=kubernetes/kubernetes

yeah, this was discussed before. the repo is unmaintained but it's not insecure. if we can continue using - great. if we cannot, we are going to fork it under cmd/kubeadm.

we need that stack tracing, consistent wrapping and error formating. just fmt.Error with %w is not a replacement.

[neolit123]

/sig architecture
/area code-organization