* security: bump go and deps versions * add changelog * fix go toolchained version * update changelog message