V5.4: Address GO-2026-4340

Author: reinkrul

Dockerfile

@@ -1,5 +1,5 @@
 # golang alpine
-FROM golang:1.25.5-alpine AS builder
+FROM golang:1.25.6-alpine AS builder
 
 ARG TARGETARCH
 ARG TARGETOS

docs/pages/release_notes.rst

@@ -3,6 +3,16 @@
 Release notes
 #############
 
+*************************
+Hazelnut update (v5.4.22)
+*************************
+
+Release date: 2026-02-04
+
+- Update Go version to fix https://pkg.go.dev/vuln/GO-2026-4340
+
+**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.21...v5.4.22
+
 *************************
 Hazelnut update (v5.4.21)
 *************************

go.mod

@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
 
 // This is the minimal version, the actual go version is determined by the images in the Dockerfile
 // This version is used in automated tests such as the 'Scheduled govulncheck' action
-go 1.25.5
+go 1.25.6
 
 require (
 	github.com/alicebob/miniredis/v2 v2.33.0