From 10e9882436206c60643ca2c623e4554649810d7e Mon Sep 17 00:00:00 2001
From: Horst Gutmann <horst.gutmann@grafana.com>
Date: Wed, 21 Oct 2026 15:00:19 +0200
Subject: [PATCH] fix(deps): explicitly update ca-certificates in build stage

---
 Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 3899c4cc..bdebb4a0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,8 +2,11 @@ FROM --platform=${BUILDPLATFORM} golang:1.27.3-alpine3.23@sha256:895e5feab11a4b3
 
 # Dependencies required to run the race detector
 RUN \
-  --mount=type=cache,target=/var/cache/apk \
+  --mount=type=cache,target=/var/cache/apk <<EOF
   apk add --no-cache gcc musl-dev
+  apk add --no-cache 'ca-certificates>=20261020-r0' \
+    && update-ca-certificates
+EOF
 
 WORKDIR /go/src/app