[3.5] Bump go.mongodb.org/mongo-driver and github.com/golang/glog to address two CVEs

[ahrtr]

• Bump go.mongodb.org/mongo-driver to v1.5.4 to address CVE-2021-20329
• Bump github.com/golang/glog to v1.2.4 to address CVE-2024-45339

Both of them are only used by tools, so we don't have to update the changelog items.

Also 3.4 isn't affected.

[ahrtr]

Also bumped actions/upload-artifact to address a workflow failure,

Error: This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

See https://github.com/etcd-io/etcd/actions/runs/13116624179/job/36592405388?pr=19320

[ahrtr]

Also bumped actions/download-artifact to address workflow failure below,

Error: This request has been automatically failed because it uses a deprecated version of `actions/download-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

See https://github.com/etcd-io/etcd/actions/runs/13116689905/job/36592932647?pr=19320

[ahrtr]

cc @ivanvc @fuweid

[fuweid]

LGTM

[ahrtr]

It seems that we need at least one maintainer/approver to approve to merge this PR. cc @jmhbnz @serathius @spzala

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ahrtr, fuweid, serathius

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [ahrtr,serathius]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment