From 7ae67b5907dd9a2cc050656cee455bd7d8d54fc3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 13:13:29 +0000
Subject: [PATCH] chore(docker)(deps): bump alpine

Bumps the docker-minor-and-patch group with 1 update in the / directory: alpine.


Updates `alpine` from 3.23 to 3.24

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.24'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Dockerfile            | 2 +-
 Dockerfile.goreleaser | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 87880d5b..279d9d51 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,7 +41,7 @@ RUN CGO_ENABLED=0 go build \
     -o pad ./cmd/pad
 
 # Stage 3: Runtime
-FROM alpine:3.23
+FROM alpine:3.24
 # ca-certificates: TLS roots for outbound HTTPS (e.g. Maileroo email).
 # tzdata: timezone names for Go's time package.
 # shadow: provides usermod / groupmod (BusyBox's adduser/addgroup don't
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 1ecf6dcf..33c090ae 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -1,4 +1,4 @@
-FROM alpine:3.23
+FROM alpine:3.24
 # Keep this package set in lockstep with Dockerfile (the local build
 # variant) — both images must support the same docker-entrypoint.sh
 # behavior. See Dockerfile for per-package rationale and TASK-1168 /