More fixes for snyk reports

- Update golang to v1.25.5 to address as many CVEs as possible
- Fix more instances of path traversal vulnerabilities

Can't go beyond v1.25.5 right now because that's what OpenHPC is using to build
for openEuler.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>

CHANGELOG.md

@@ -22,6 +22,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Fix path traversal vulnerability (CWE-23) in overlay cleanup function
 - Fix `wwctl image build --all` to build all images
 - Fix `wwctl node set --all` to set values on all nodes
+- Fix path traversal vulnerability (CWE-23)
+- Bump minimum golang version to 1.25.5 to address stdlib CVEs
 
 ### Dependencies