From 0e1748d309e844879fd280de978d5fcd2c92e9f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 21:54:30 +0000 Subject: [PATCH] Bump the docker-deps group across 6 directories with 5 updates Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12. Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang. Updates `mysql` from `c36050a` to `d36d39a` Updates `postgres` from `8ff36f3` to `4aabea7` Updates `alpine` from 3.23 to 3.24 Updates `golang` from `5d2b868` to `b305420` Updates `distroless/base-debian12` from `58695f4` to `e7e678c` Updates `golang` from `5d2b868` to `b305420` Updates `distroless/base-debian12` from `58695f4` to `e7e678c` Updates `golang` from `5d2b868` to `b305420` --- updated-dependencies: - dependency-name: mysql dependency-version: '8.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: postgres dependency-version: '18.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps ... Signed-off-by: dependabot[bot] --- examples/deployment/docker/db_server/Dockerfile | 2 +- examples/deployment/docker/db_server/postgresql/Dockerfile | 2 +- examples/deployment/docker/envsubst/Dockerfile | 2 +- examples/deployment/docker/log_server/Dockerfile | 4 ++-- examples/deployment/docker/log_signer/Dockerfile | 4 ++-- integration/cloudbuild/testbase/Dockerfile | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/examples/deployment/docker/db_server/Dockerfile b/examples/deployment/docker/db_server/Dockerfile index c0cdd02cd5..b1c29244b6 100644 --- a/examples/deployment/docker/db_server/Dockerfile +++ b/examples/deployment/docker/db_server/Dockerfile @@ -1,4 +1,4 @@ -FROM mysql:8.4@sha256:c36050afdca850f23cef85703f84c7531a5ae155a11b5ee1c60acb09937c4084 +FROM mysql:8.4@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209 # TODO(roger2hk): Uncomment the below OS-level packages patch command as this is a temporary workaround to bypass the mysql8 gpg key rotation issue. # # Patch the OS-level packages and remove unneeded dependencies. diff --git a/examples/deployment/docker/db_server/postgresql/Dockerfile b/examples/deployment/docker/db_server/postgresql/Dockerfile index 052017cfb6..64d2768f2b 100644 --- a/examples/deployment/docker/db_server/postgresql/Dockerfile +++ b/examples/deployment/docker/db_server/postgresql/Dockerfile @@ -1,4 +1,4 @@ -FROM postgres:18.4@sha256:8ff36f3c66371cba71d20ceedccfc3de9669a68737607888c4ef0af93abe8e39 +FROM postgres:18.4@sha256:4aabea78cf39b90e834caf3af7d602a18565f6fe2508705c8d01aa63245c2e20 # expects the build context to be: $GOPATH/src/github.com/google/trillian COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql diff --git a/examples/deployment/docker/envsubst/Dockerfile b/examples/deployment/docker/envsubst/Dockerfile index 8884cca31d..8ce6d40fd9 100644 --- a/examples/deployment/docker/envsubst/Dockerfile +++ b/examples/deployment/docker/envsubst/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 +FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b RUN apk add --no-cache gettext diff --git a/examples/deployment/docker/log_server/Dockerfile b/examples/deployment/docker/log_server/Dockerfile index fe7e780e78..9e48e18efd 100644 --- a/examples/deployment/docker/log_server/Dockerfile +++ b/examples/deployment/docker/log_server/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.26.4-bookworm@sha256:5d2b868674b57c9e48cdd39e891acce4196b6926ca6d11e9c270a8f85106203d as build +FROM golang:1.26.4-bookworm@sha256:b305420a68d0f229d91eb3b3ed9e519fcf2cf5461da4bef997bf927e8c0bfd2b as build WORKDIR /trillian @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 +FROM gcr.io/distroless/base-debian12@sha256:e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 COPY --from=build /go/bin/trillian_log_server / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/docker/log_signer/Dockerfile b/examples/deployment/docker/log_signer/Dockerfile index 3ac5071993..e6db228039 100644 --- a/examples/deployment/docker/log_signer/Dockerfile +++ b/examples/deployment/docker/log_signer/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.26.4-bookworm@sha256:5d2b868674b57c9e48cdd39e891acce4196b6926ca6d11e9c270a8f85106203d as build +FROM golang:1.26.4-bookworm@sha256:b305420a68d0f229d91eb3b3ed9e519fcf2cf5461da4bef997bf927e8c0bfd2b as build WORKDIR /trillian @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 +FROM gcr.io/distroless/base-debian12@sha256:e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 COPY --from=build /go/bin/trillian_log_signer / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/integration/cloudbuild/testbase/Dockerfile b/integration/cloudbuild/testbase/Dockerfile index 6af74ed5b9..75640b128a 100644 --- a/integration/cloudbuild/testbase/Dockerfile +++ b/integration/cloudbuild/testbase/Dockerfile @@ -1,5 +1,5 @@ # This Dockerfile builds a base image for Trillan integration tests. -FROM golang:1.26.4-bookworm@sha256:5d2b868674b57c9e48cdd39e891acce4196b6926ca6d11e9c270a8f85106203d +FROM golang:1.26.4-bookworm@sha256:b305420a68d0f229d91eb3b3ed9e519fcf2cf5461da4bef997bf927e8c0bfd2b WORKDIR /testbase