[dependabot]

Bumps debian from 62bd423 to f6b08b0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Verified the new Debian index digest against Docker Hub, including the Linux amd64 and arm64 manifest and config hashes.

Documentation impact is limited to adding the reviewed controller digest and base-config creation date to docs/MANAGED-IMAGES.md. Previous review records are retained.

No standalone configuration-template change is needed because this controller base-image refresh changes no configuration contract or adoption steps.

Current source is 163595373288c8500a739439462d0a9b3fb5def1, reconciled once with actual merged main 8fcefb898a9cc386376a8cd38b36f81659fb1f8e. Its tree is 0c75073efd82007d8f48506f2777aa08e6618e6c; ordered merge parents are the published PR161 source 065c2cb6fe5145756ca767b6c8da9010c3a90e2d and actual main. Published history is preserved.

Against that base, only controller/Dockerfile and docs/MANAGED-IMAGES.md differ, with two additions and one deletion. The Dockerfile bytes are identical to the approved controller Dockerfile. The only merge conflict was the managed-image table; resolution retains all merged runner records and historical rows, plus the unchanged approved controller row. Every other file and mode matches the actual base.

Focused documentation-link, whitespace, commit-convention, PR-title and committed-secret checks passed for the new source. The existing independent review approved 065c2cb against 4c30089; its unchanged digest, documentation and registry evidence is retained. The existing direct independent exact-source/base binding approved this reconciled source, base and tree with no findings on 2026-11-07. Its durable technical review receipt has SHA256 5fac3b93c82b74da8ab9bec7c837d922ce9088a5c7329312ba664aa4f32d1b49. This is source approval only, not a submitted human GitHub approval or required validation pass; no additional panel or registry review was needed.

The controller image build, module verification and Go tests passed earlier at 71f2d8d23e76417cf0d5c8d220bd538230bcf6e3. That historical log is retained and does not establish validation of the final candidate or inherited main changes. The earlier owner-reported runtime smoke has no separate retained raw log.

PR161's own normal required native run 42354925731, attempt 1 passed all eight stages for this exact source/base/tree and admitted policy merge 9a2845d1a6f5ed453d401bb88a2ae9bcb9854c74. Expected skips are empty. Original test inventories and all 22 plain-OK Python summaries were verified, including 22 executor controls.

The official nine-file ZIP matches GitHub's published SHA256 38cfcd9dff5945ea810b13f78f86067163c974eaa8971f92ab23711811fbb803. All stage-report/log bindings and 12 worker export files were verified. The complete cache, uncached/cached managed-image identity and outage paths passed. Official-to-worker result byte equality was unavailable after Actions removed its temporary copy and is not claimed.

Fleet closed the native transaction with verified exports, scoped credential/grant cleanup, restored baseline executor 689c7c0 and passed final role/idle/protected-state admission. The closed receipt has SHA256 d93e82ba6a790da6aeeb28255e2a95a5e5a1bf0ec3f895eb23f1b5b5653a7a80. The source owner independently verified all 85 terminal payload sizes/hashes and raw archive/log bindings before normal merge gates.

Both required build and convention jobs passed on their actual assigned runners. No prior PR check, historical build, skipped optional check or unavailable bot supplied acceptance. Worker reservation, private image promotion, live-worker recovery and app-route release remain separate.

[cursor]

Approved. Cursor Bugbot was not present after the first check poll, so that signal was skipped; remaining evidence is a digest-pinned controller Debian 13.7-slim bump with a matching managed-image record and no findings that need human review.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}