From 018c8b9429d1288ff274c39bf20d5c01e3db2526 Mon Sep 17 00:00:00 2001 From: Rein Krul Date: Fri, 5 Dec 2025 12:22:01 +0100 Subject: [PATCH 1/2] Update Go to 1.25.5 for CVE --- Dockerfile | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c134ccab2..61ba0ed57 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # golang alpine -FROM golang:1.25.4-alpine AS builder +FROM golang:1.25.5-alpine AS builder ARG TARGETARCH ARG TARGETOS diff --git a/go.mod b/go.mod index fbdb3e58d..212a17f97 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node // This is the minimal version, the actual go version is determined by the images in the Dockerfile // This version is used in automated tests such as the 'Scheduled govulncheck' action -go 1.25.3 +go 1.25.5 require ( github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.0 From d941d03bb27f3985903e90e60c500eb67945f615 Mon Sep 17 00:00:00 2001 From: Rein Krul Date: Tue, 9 Dec 2025 11:17:01 +0100 Subject: [PATCH 2/2] pr feedback --- docs/pages/release_notes.rst | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/docs/pages/release_notes.rst b/docs/pages/release_notes.rst index f51cc30c7..f603398f3 100644 --- a/docs/pages/release_notes.rst +++ b/docs/pages/release_notes.rst @@ -2,6 +2,17 @@ Release notes ############# +*************** +Peanut (v6.1.7) +*************** + +Release date: 2025-12-04 + +- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175, + https://pkg.go.dev/vuln/GO-2025-4155 +**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.6...v6.1.7 + + *************** Peanut (v6.1.6) *************** @@ -300,6 +311,17 @@ The following features have been deprecated: - Network v1 API, to be removed - VDR v1 API, replaced by VDR v2 +************************* +Hazelnut update (v5.4.21) +************************* + +Release date: 2025-12-04 + +- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4175, + https://pkg.go.dev/vuln/GO-2025-4155 +**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.20...v5.4.21 + + ************************* Hazelnut update (v5.4.20) *************************