From 716827fc2ab5a931ae1b31987c55cfce5e0e6da9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 18:54:30 +0000 Subject: [PATCH] build(deps): bump the docker group in /templates/builder with 2 updates Bumps the docker group in /templates/builder with 2 updates: golang and alpine. Updates `golang` from `895e5fe` to `8a50464` Updates `alpine` from `294b683` to `be26560` --- updated-dependencies: - dependency-name: golang dependency-version: 1.27.3-alpine3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker ... Signed-off-by: dependabot[bot] --- templates/builder/Dockerfile.tmpl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/builder/Dockerfile.tmpl b/templates/builder/Dockerfile.tmpl index ef9a629..c8b1b73 100644 --- a/templates/builder/Dockerfile.tmpl +++ b/templates/builder/Dockerfile.tmpl @@ -34,7 +34,7 @@ FROM scratch AS gomodproxy # It is the same image pkg/runtime/runtime-image.json locks the Go runtime # container to, so a module builds the same way in a local container run and in # this recipe. Moving Go moves both; dockerfile_template_test.go holds that. -FROM --platform=$BUILDPLATFORM golang:1.27.3-alpine3.23@sha256:895e5feab11a4b3774d24ee3c9579028456b82ad37f42a9eb6f82adaf776a201 AS builder +FROM --platform=$BUILDPLATFORM golang:1.27.3-alpine3.23@sha256:8a5046497cda39860b832ffdbe8dd66018a0f05bb01352f533a36e7e2ced66a0 AS builder # git is the one package the pinned base lacks and GOPRIVATE module fetches # need; ca-certificates is already in it, so installing it again would add a @@ -81,7 +81,7 @@ RUN --mount=type=bind,from=gomodproxy,target=/gomodproxy \ go version -m app > /go-build-info.txt # Final stage -FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a # No `apk add` here on purpose. The pinned base already ships # ca-certificates-bundle, which owns /etc/ssl/certs/ca-certificates.crt — the