Update Go to 1.25.5 for CVE (#3955)

Author: reinkrul

Dockerfile

@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.25.4-alpine AS builder
+FROM golang:1.25.5-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS

docs/pages/release_notes.rst

@@ -2,6 +2,17 @@
 Release notes
 #############
 
+***************
+Peanut (v6.1.7)
+***************
+
+Release date: 2025-12-04
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175,
+  https://pkg.go.dev/vuln/GO-2025-4155
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.6...v6.1.7
+
+
 ***************
 Peanut (v6.1.6)
 ***************
@@ -300,6 +311,17 @@ The following features have been deprecated:
 - Network v1 API, to be removed
 - VDR v1 API, replaced by VDR v2
 
+*************************
+Hazelnut update (v5.4.21)
+*************************
+
+Release date: 2025-12-04
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175,
+  https://pkg.go.dev/vuln/GO-2025-4155
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.20...v5.4.21
+
+
 *************************
 Hazelnut update (v5.4.20)
 *************************

go.mod

@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
 
 // This is the minimal version, the actual go version is determined by the images in the Dockerfile
 // This version is used in automated tests such as the 'Scheduled govulncheck' action
-go 1.25.3
+go 1.25.5
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.0