V5.4: update go version to fix vulnerabilities (#3841)

add changelog

Author: gerardsn

Dockerfile

@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.24.2-alpine AS builder
+FROM golang:1.24.4-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS
@@ -21,7 +21,7 @@ COPY . .
 RUN CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build -ldflags="-w -s -X 'github.com/nuts-foundation/nuts-node/core.GitCommit=${GIT_COMMIT}' -X 'github.com/nuts-foundation/nuts-node/core.GitBranch=${GIT_BRANCH}' -X 'github.com/nuts-foundation/nuts-node/core.GitVersion=${GIT_VERSION}'" -o /opt/nuts/nuts
 
 # alpine
-FROM alpine:3.21.2
+FROM alpine:3.22.0
 RUN apk update \
   && apk add --no-cache \
              tzdata \

docs/pages/release_notes.rst

@@ -3,9 +3,19 @@
 Release notes
 #############
 
-***************
+*************************
+Hazelnut update (v5.4.19)
+*************************
+
+Release date: 2025-06-13
+
+- Update go version to fix https://pkg.go.dev/vuln/GO-2025-3749, https://pkg.go.dev/vuln/GO-2025-3750, https://pkg.go.dev/vuln/GO-2025-3751
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.18...v5.4.19
+
+*************************
 Hazelnut update (v5.4.18)
-***************
+*************************
 
 Release date: 2025-04-28
 

go.mod

@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
 
 // This is the minimal version, the actual go version is determined by the images in the Dockerfile
 // This version is used in automated tests such as the 'Scheduled govulncheck' action
-go 1.24.2
+go 1.24.4
 
 require (
 	github.com/alicebob/miniredis/v2 v2.33.0