[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
gcr.io/distroless/static-debian13	final	digest	9e0130b → 034df5c
golang (source)	stage	digest	895e5fe → 754d520

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[renovate-reviewer]

All checks have passed and this PR has been approved.

• ✅ PR created by Renovate
• ✅ Not flagged for manual review
• ✅ All commits by Renovate
• ✅ All commits are signed
• ✅ Files previously updated by Renovate
• ✅ Update type: digest
• ✅ Diff check: changes only dependency lines
• ✅ Risk scan: low risk. The Dockerfile updates the pinned sha256 digests for the golang builder image and the gcr.io/distroless/static-debian13 final image, with image tags unchanged.
• ✅ Version direction: no downgrades
• ✅ Packages previously updated
• ✅ TruffleHog Secret Scanning passed
• ✅ zizmor GitHub Actions static analysis passed