From 43d9dd6e1a209e40089825c0d0ab8add50d01d27 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 2 May 2026 01:20:30 +0000 Subject: [PATCH] Bump the docker-deps group across 7 directories with 6 updates Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12. Bumps the docker-deps group with 1 update in the /examples/deployment/kubernetes/mysql/image directory: ubuntu. Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang. Updates `mysql` from `da90691` to `43bd976` Updates `postgres` from `a9abf42` to `7848165` Updates `alpine` from `2510918` to `5b10f43` Updates `golang` from 1.26.1-bookworm to 1.26.2-bookworm Updates `distroless/base-debian12` from `937c7ea` to `9dce90e` Updates `golang` from 1.26.1-bookworm to 1.26.2-bookworm Updates `distroless/base-debian12` from `937c7ea` to `9dce90e` Updates `ubuntu` from `5e5b128` to `962f6ca` Updates `golang` from 1.26.1-bookworm to 1.26.2-bookworm --- updated-dependencies: - dependency-name: mysql dependency-version: '8.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: postgres dependency-version: '18.3' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: alpine dependency-version: '3.23' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.2-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 9dce90e688a57e59ce473ff7bc4c80bc8fe52d2303b4d99b44f297310bbd2210 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.2-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 9dce90e688a57e59ce473ff7bc4c80bc8fe52d2303b4d99b44f297310bbd2210 dependency-type: direct:production dependency-group: docker-deps - dependency-name: ubuntu dependency-version: jammy dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.2-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps ... Signed-off-by: dependabot[bot] --- examples/deployment/docker/db_server/Dockerfile | 2 +- examples/deployment/docker/db_server/postgresql/Dockerfile | 2 +- examples/deployment/docker/envsubst/Dockerfile | 2 +- examples/deployment/docker/log_server/Dockerfile | 4 ++-- examples/deployment/docker/log_signer/Dockerfile | 4 ++-- examples/deployment/kubernetes/mysql/image/Dockerfile | 2 +- integration/cloudbuild/testbase/Dockerfile | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/examples/deployment/docker/db_server/Dockerfile b/examples/deployment/docker/db_server/Dockerfile index 4b16e58488..3bcaf40d8f 100644 --- a/examples/deployment/docker/db_server/Dockerfile +++ b/examples/deployment/docker/db_server/Dockerfile @@ -1,4 +1,4 @@ -FROM mysql:8.4@sha256:da906917ca4ace3ba55538b7c2ee97a9bc865ef14a4b6920b021f0249d603f3d +FROM mysql:8.4@sha256:43bd9764df60666fb2ba2cf8217dd17b3d2414c150005d2fdd07a0cd73d3b7f5 # TODO(roger2hk): Uncomment the below OS-level packages patch command as this is a temporary workaround to bypass the mysql8 gpg key rotation issue. # # Patch the OS-level packages and remove unneeded dependencies. diff --git a/examples/deployment/docker/db_server/postgresql/Dockerfile b/examples/deployment/docker/db_server/postgresql/Dockerfile index c6b8969b74..4b43a30f2c 100644 --- a/examples/deployment/docker/db_server/postgresql/Dockerfile +++ b/examples/deployment/docker/db_server/postgresql/Dockerfile @@ -1,4 +1,4 @@ -FROM postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a +FROM postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4 # expects the build context to be: $GOPATH/src/github.com/google/trillian COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql diff --git a/examples/deployment/docker/envsubst/Dockerfile b/examples/deployment/docker/envsubst/Dockerfile index bd0d374218..8884cca31d 100644 --- a/examples/deployment/docker/envsubst/Dockerfile +++ b/examples/deployment/docker/envsubst/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659 +FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 RUN apk add --no-cache gettext diff --git a/examples/deployment/docker/log_server/Dockerfile b/examples/deployment/docker/log_server/Dockerfile index d8c2145b37..80e6296ac8 100644 --- a/examples/deployment/docker/log_server/Dockerfile +++ b/examples/deployment/docker/log_server/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.26.1-bookworm@sha256:8e8aa801e8417ef0b5c42b504dd34db3db911bb73dba933bd8bde75ed815fdbb as build +FROM golang:1.26.2-bookworm@sha256:47ce5636e9936b2c5cbf708925578ef386b4f8872aec74a67bd13a627d242b19 as build WORKDIR /trillian @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:937c7eaaf6f3f2d38a1f8c4aeff326f0c56e4593ea152e9e8f74d976dde52f56 +FROM gcr.io/distroless/base-debian12@sha256:9dce90e688a57e59ce473ff7bc4c80bc8fe52d2303b4d99b44f297310bbd2210 COPY --from=build /go/bin/trillian_log_server / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/docker/log_signer/Dockerfile b/examples/deployment/docker/log_signer/Dockerfile index 7f35a39b07..7fa6ed95c2 100644 --- a/examples/deployment/docker/log_signer/Dockerfile +++ b/examples/deployment/docker/log_signer/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.26.1-bookworm@sha256:8e8aa801e8417ef0b5c42b504dd34db3db911bb73dba933bd8bde75ed815fdbb as build +FROM golang:1.26.2-bookworm@sha256:47ce5636e9936b2c5cbf708925578ef386b4f8872aec74a67bd13a627d242b19 as build WORKDIR /trillian @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:937c7eaaf6f3f2d38a1f8c4aeff326f0c56e4593ea152e9e8f74d976dde52f56 +FROM gcr.io/distroless/base-debian12@sha256:9dce90e688a57e59ce473ff7bc4c80bc8fe52d2303b4d99b44f297310bbd2210 COPY --from=build /go/bin/trillian_log_signer / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/kubernetes/mysql/image/Dockerfile b/examples/deployment/kubernetes/mysql/image/Dockerfile index 16da3d4fc2..5e6c2ae0fc 100644 --- a/examples/deployment/kubernetes/mysql/image/Dockerfile +++ b/examples/deployment/kubernetes/mysql/image/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM ubuntu:jammy@sha256:5e5b128eb4ff35ee52687c20d081dcc15b8cb55e113247683f435224fc58b956 +FROM ubuntu:jammy@sha256:962f6cadeae0ea6284001009daa4cc9a8c37e75d1f5191cf0eb83fe565b63dd7 # Patch the OS-level packages and remove unneeded dependencies. RUN apt-get update \ diff --git a/integration/cloudbuild/testbase/Dockerfile b/integration/cloudbuild/testbase/Dockerfile index 5c48f25769..0f9b02183e 100644 --- a/integration/cloudbuild/testbase/Dockerfile +++ b/integration/cloudbuild/testbase/Dockerfile @@ -1,5 +1,5 @@ # This Dockerfile builds a base image for Trillan integration tests. -FROM golang:1.26.1-bookworm@sha256:8e8aa801e8417ef0b5c42b504dd34db3db911bb73dba933bd8bde75ed815fdbb +FROM golang:1.26.2-bookworm@sha256:47ce5636e9936b2c5cbf708925578ef386b4f8872aec74a67bd13a627d242b19 WORKDIR /testbase