V6.1 update Go to v1.25.3 (#3938)

* V6.1 update Go to v1.25.3

* update release notes

* also update circleci image

---------

Co-authored-by: Wout Slakhorst <[email protected]>

Author: gerardsn

.circleci/config.yml

@@ -13,7 +13,7 @@ jobs:
   build:
     parallelism: 8
     docker:
-      - image: cimg/go:1.23
+      - image: cimg/go:1.25
     steps:
       - checkout
 
@@ -37,7 +37,7 @@ jobs:
 
   report:
     docker:
-      - image: cimg/go:1.23
+      - image: cimg/go:1.25
     steps:
       - checkout
       - attach_workspace:

Dockerfile

@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.24.6-alpine AS builder
+FROM golang:1.25.3-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS
@@ -21,7 +21,7 @@ COPY . .
 RUN GOOS=$TARGETOS GOARCH=$TARGETARCH go build -ldflags="-w -s -X 'github.com/nuts-foundation/nuts-node/core.GitCommit=${GIT_COMMIT}' -X 'github.com/nuts-foundation/nuts-node/core.GitBranch=${GIT_BRANCH}' -X 'github.com/nuts-foundation/nuts-node/core.GitVersion=${GIT_VERSION}'" -o /opt/nuts/nuts
 
 # alpine
-FROM alpine:3.22.0
+FROM alpine:3.22.2
 RUN apk update \
   && apk add --no-cache \
              tzdata \

docs/pages/release_notes.rst

@@ -2,6 +2,45 @@
 Release notes
 #############
 
+***************
+Peanut (v6.1.6)
+***************
+
+Release date: 2025-11-03
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4007,
+  https://pkg.go.dev/vuln/GO-2025-4008,
+  https://pkg.go.dev/vuln/GO-2025-4009,
+  https://pkg.go.dev/vuln/GO-2025-4010,
+  https://pkg.go.dev/vuln/GO-2025-4011,
+  https://pkg.go.dev/vuln/GO-2025-4012,
+  https://pkg.go.dev/vuln/GO-2025-4013, and
+  https://pkg.go.dev/vuln/GO-2025-4014
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.5...v6.1.6
+
+***************
+Peanut (v6.1.5)
+***************
+
+Release date: 2025-09-05
+
+- Update deps on v6.1 branch by @stevenvegt in [#3898](https://github.com/nuts-foundation/nuts-node/pull/3898)
+- fix: Resolve GO-2025-3849 vuln on V6.1 by @confiks in [#3902](https://github.com/nuts-foundation/nuts-node/pull/3902)
+- fix vuln from go-viper by @woutslakhorst in [#3917](https://github.com/nuts-foundation/nuts-node/pull/3917)
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.4...v6.1.5
+
+***************
+Peanut (v6.1.4)
+***************
+
+Release date: 2025-07-01
+
+- Build and publish binaries to GH Releases [#3849](https://github.com/nuts-foundation/nuts-node/pull/3849) by @reinkrul in [#3859](https://github.com/nuts-foundation/nuts-node/pull/3859)
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.3...v6.1.4
+
 ***************
 Peanut (v6.1.3)
 ***************
@@ -10,7 +49,6 @@ Release date: 2025-06-13
 
 - Update go version to fix https://pkg.go.dev/vuln/GO-2025-3749, https://pkg.go.dev/vuln/GO-2025-3750, https://pkg.go.dev/vuln/GO-2025-3751
 
-
 **Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v6.1.2...v6.1.3
 
 ***************
@@ -262,6 +300,23 @@ The following features have been deprecated:
 - Network v1 API, to be removed
 - VDR v1 API, replaced by VDR v2
 
+*************************
+Hazelnut update (v5.4.20)
+*************************
+
+Release date: 2025-11-03
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2025-4007,
+  https://pkg.go.dev/vuln/GO-2025-4008,
+  https://pkg.go.dev/vuln/GO-2025-4009,
+  https://pkg.go.dev/vuln/GO-2025-4010,
+  https://pkg.go.dev/vuln/GO-2025-4011,
+  https://pkg.go.dev/vuln/GO-2025-4012,
+  https://pkg.go.dev/vuln/GO-2025-4013, and
+  https://pkg.go.dev/vuln/GO-2025-4014
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.19...v5.4.20
+
 *************************
 Hazelnut update (v5.4.19)
 *************************

go.mod

@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
 
 // This is the minimal version, the actual go version is determined by the images in the Dockerfile
 // This version is used in automated tests such as the 'Scheduled govulncheck' action
-go 1.24.6
+go 1.25.3
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.0