diff --git a/Dockerfile b/Dockerfile
index c134ccab2..61ba0ed57 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.25.4-alpine AS builder
+FROM golang:1.25.5-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS
diff --git a/docs/pages/release_notes.rst b/docs/pages/release_notes.rst
index f51cc30c7..f603398f3 100644
--- a/docs/pages/release_notes.rst
+++ b/docs/pages/release_notes.rst
@@ -2,6 +2,17 @@
 Release notes
 #############
 
+***************
+Peanut (v6.1.7)
+***************
+
+Release date: 2025-12-04
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175,
+  https://pkg.go.dev/vuln/GO-2025-4155
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.6...v6.1.7
+
+
 ***************
 Peanut (v6.1.6)
 ***************
@@ -300,6 +311,17 @@ The following features have been deprecated:
 - Network v1 API, to be removed
 - VDR v1 API, replaced by VDR v2
 
+*************************
+Hazelnut update (v5.4.21)
+*************************
+
+Release date: 2025-12-04
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175,
+  https://pkg.go.dev/vuln/GO-2025-4155
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.20...v5.4.21
+
+
 *************************
 Hazelnut update (v5.4.20)
 *************************
diff --git a/go.mod b/go.mod
index fbdb3e58d..212a17f97 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
 
 // This is the minimal version, the actual go version is determined by the images in the Dockerfile
 // This version is used in automated tests such as the 'Scheduled govulncheck' action
-go 1.25.3
+go 1.25.5
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.0