[Snyk] Security upgrade golang from 1.18.0-alpine to 1.25rc3-alpine

[ayoinc]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• builder/Dockerfile

We recommend upgrading to golang:1.25rc3-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-ALPINE315-ZLIB-2976173	714
	Use After Free SNYK-ALPINE315-OPENSSL-3314621	614
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-ALPINE315-OPENSSL-3314622	614
	Double Free SNYK-ALPINE315-OPENSSL-3314629	614
	Improper Certificate Validation SNYK-ALPINE315-OPENSSL-3368753	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use After Free
🦉 Access of Resource Using Incompatible Type ('Type Confusion')
🦉 Double Free

[Copilot]

Pull Request Overview

This PR upgrades the Go base Docker image from version 1.18.0-alpine to 1.25rc3-alpine to address 5 security vulnerabilities identified by Snyk, including critical and high-severity issues in zlib and OpenSSL dependencies.

• Upgrades Docker base image from golang:1.18.0-alpine to golang:1.25rc3-alpine
• Fixes 5 security vulnerabilities (1 critical, 4 high severity)
• Addresses vulnerabilities in zlib and OpenSSL components