From 6c59ecd758540e3465dc5c97a939469a5600fb51 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 16:25:34 +0000 Subject: [PATCH 1/2] chore(deps): bump debian from `62bd423` to `f6b08b0` in /controller Bumps debian from `62bd423` to `f6b08b0`. --- updated-dependencies: - dependency-name: debian dependency-version: 13.7-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- controller/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controller/Dockerfile b/controller/Dockerfile index 7c6f7d7b..911250f0 100644 --- a/controller/Dockerfile +++ b/controller/Dockerfile @@ -20,7 +20,7 @@ ARG CI_FLEET_COMMIT=unknown RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w -X main.version=${CI_FLEET_VERSION} -X main.commitSHA=${CI_FLEET_COMMIT}" -o /out/ci-fleet-controller . \ && touch -d "@${SOURCE_DATE_EPOCH}" /out/ci-fleet-controller -FROM debian:13.7-slim@sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad +FROM debian:13.7-slim@sha256:f6b08b09a05725f9431502d3b5714f5c4576e82c1a84fa1debe0c24a7e0c3ec4 ARG SOURCE_DATE_EPOCH=1786752000 ARG DEBIAN_SNAPSHOT=20261012T000000Z ARG CI_FLEET_COMMIT=unknown From 71f2d8d23e76417cf0d5c8d220bd538230bcf6e3 Mon Sep 17 00:00:00 2001 From: Nick Foster Date: Thu, 5 Nov 2026 13:15:30 -0600 Subject: [PATCH 2/2] docs: record reviewed controller Debian image digest --- docs/MANAGED-IMAGES.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/MANAGED-IMAGES.md b/docs/MANAGED-IMAGES.md index c0c9fed3..6a4b0ba8 100644 --- a/docs/MANAGED-IMAGES.md +++ b/docs/MANAGED-IMAGES.md @@ -156,6 +156,7 @@ Compose selections are unchanged. | Input | Immutable selection | Evidence | | --- | --- | --- | | Runner Debian 13.7 slim, reviewed 2026-10-30 | `sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad` | Docker Hub manifest bytes match the digest and include Linux amd64 and arm64; base configs were created 2026-10-20 | +| Controller Debian 13.7 slim, reviewed 2026-11-05 | `sha256:f6b08b09a05725f9431502d3b5714f5c4576e82c1a84fa1debe0c24a7e0c3ec4` | Docker Hub manifest bytes match the digest and include Linux amd64 and arm64; base configs were created 2026-10-27 | | Controller Debian 13.7 slim, reviewed 2026-10-30 | `sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad` | Docker Hub manifest bytes match the digest and include Linux amd64 and arm64; base configs were created 2026-10-20 | | Debian 13.7 slim, reviewed 2026-10-12 for both images | `sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f` | Docker Hub registry manifest for `library/debian:13.7-slim`; retained historical review | | Go 1.27.3 Bookworm build image | `sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5` | Docker Hub registry manifest for `library/golang:1.27.3-bookworm`; [upstream patch notes](https://go.dev/doc/devel/release#go1.27.3) |