Add patch version to go.mod for 'Scheduled govulncheck' (#3653)

* add patch version to go.mod for 'Scheduled govulncheck'

* update Dockerfile

* fix Dockerfile

* backport e2e-test fix

Author: gerardsn

.github/workflows/e2e-tests.yaml

@@ -81,6 +81,7 @@ jobs:
 
       - name: package cleanup
         uses: dataaxiom/ghcr-cleanup-action@v1
+        continue-on-error: true # action doesn't fail when this step fails
         if: ${{ github.actor != 'dependabot' }}
         with:
           owner: nuts-foundation
@@ -91,6 +92,7 @@ jobs:
 
       - name: package cleanup dependabot
         uses: dataaxiom/ghcr-cleanup-action@v1
+        continue-on-error: true # action doesn't fail when this step fails
         if: ${{ github.actor == 'dependabot' }}
         with:
           owner: nuts-foundation

Dockerfile

@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.23.2-alpine AS builder
+FROM golang:1.23.4-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS
@@ -28,12 +28,11 @@ COPY . .
 RUN GOOS=$TARGETOS GOARCH=$TARGETARCH go build -ldflags="-w -s -X 'github.com/nuts-foundation/nuts-node/core.GitCommit=${GIT_COMMIT}' -X 'github.com/nuts-foundation/nuts-node/core.GitBranch=${GIT_BRANCH}' -X 'github.com/nuts-foundation/nuts-node/core.GitVersion=${GIT_VERSION}'" -o /opt/nuts/nuts
 
 # alpine
-FROM alpine:3.20.3
+FROM alpine:3.21.2
 RUN apk update \
   && apk add --no-cache \
              tzdata \
-             curl \
-  && update-ca-certificates
+             curl
 COPY --from=builder /opt/nuts/nuts /usr/bin/nuts
 
 HEALTHCHECK --start-period=30s --timeout=5s --interval=10s \

go.mod

@@ -1,6 +1,8 @@
 module github.com/nuts-foundation/nuts-node
 
-go 1.23
+// This is the minimal version, the actual go version is determined by the images in the Dockerfile
+// This version is used in automated tests such as the 'Scheduled govulncheck' action
+go 1.23.4
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0