From 34f52907ce7c8fe82b7ecf6f56c870e0f1ac02b5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 15:47:23 +0000 Subject: [PATCH] chore(deps): bump the docker-all group across 2 directories with 2 updates Bumps the docker-all group with 2 updates in the / directory: golang and alpine. Bumps the docker-all group with 2 updates in the /examples/complex_wallet_examples/create_faucet_server directory: golang and alpine. Updates `golang` from `f2c872b` to `d200d2d` Updates `alpine` from `294b683` to `be26560` Updates `golang` from `f2c872b` to `d200d2d` Updates `alpine` from `294b683` to `be26560` --- updated-dependencies: - dependency-name: golang dependency-version: 1.27-alpine dependency-type: direct:production dependency-group: docker-all - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-all - dependency-name: golang dependency-version: 1.27-alpine dependency-type: direct:production dependency-group: docker-all - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-all ... Signed-off-by: dependabot[bot] --- Dockerfile | 4 ++-- Dockerfile.dashboard | 4 ++-- Dockerfile.pos | 4 ++-- Dockerfile.throughput | 4 ++-- .../complex_wallet_examples/create_faucet_server/Dockerfile | 4 ++-- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/Dockerfile b/Dockerfile index a99f87db0..8b65c957b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,7 +9,7 @@ # kept so Dependabot preserves the -alpine variant on bumps: given a digest alone # it cannot tell -alpine from the default Debian image and silently flips the # builder to Debian, which has no `apk` and breaks the build. -FROM golang:1.27-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd AS builder +FROM golang:1.27-alpine@sha256:d200d2dd76b03a99b52651fd1325aff7dcd35422c35c01bac56571b0507f3deb AS builder # Install build dependencies RUN apk add --no-cache git ca-certificates tzdata @@ -33,7 +33,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ # ============================================================================= # Runtime stage # ============================================================================= -FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a RUN apk add --no-cache ca-certificates tzdata curl postgresql-client \ && adduser -D -H -u 1000 app diff --git a/Dockerfile.dashboard b/Dockerfile.dashboard index c9e690968..fe330ac73 100644 --- a/Dockerfile.dashboard +++ b/Dockerfile.dashboard @@ -8,7 +8,7 @@ # reproducibility; the tag is kept so Dependabot preserves the -alpine variant on # bumps (a digest alone is variant-ambiguous and can flip the builder to Debian, # which has no `apk`). -FROM golang:1.27-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd AS builder +FROM golang:1.27-alpine@sha256:d200d2dd76b03a99b52651fd1325aff7dcd35422c35c01bac56571b0507f3deb AS builder RUN apk add --no-cache ca-certificates git tzdata @@ -32,7 +32,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ # ============================================================================= # Runtime stage # ============================================================================= -FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a RUN apk add --no-cache ca-certificates curl postgresql-client tzdata \ && adduser -D -H -u 1000 app diff --git a/Dockerfile.pos b/Dockerfile.pos index b873955bb..bfda37b45 100644 --- a/Dockerfile.pos +++ b/Dockerfile.pos @@ -1,12 +1,12 @@ # syntax=docker/dockerfile:1 -FROM golang:1.27.3-bookworm@sha256:21ade014faf952365b9ecbd8dbdb87176fbacb82fac9fb132d9f2a7b8cc3f132 AS builder +FROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS builder WORKDIR /src COPY go.mod go.sum ./ RUN --mount=type=cache,target=/go/pkg/mod go mod download COPY . . RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/merchant-pos ./cmd/pos -FROM alpine@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a RUN apk upgrade --no-cache && apk add --no-cache ca-certificates tzdata && addgroup -g 1000 pos && adduser -D -u 1000 -G pos pos && mkdir -p /app/data && chown pos:pos /app/data WORKDIR /app COPY --from=builder /out/merchant-pos /app/merchant-pos diff --git a/Dockerfile.throughput b/Dockerfile.throughput index fc38a9054..31aee39dd 100644 --- a/Dockerfile.throughput +++ b/Dockerfile.throughput @@ -8,7 +8,7 @@ # reproducibility; the tag is kept so Dependabot preserves the -alpine variant on # bumps (a digest alone is variant-ambiguous and can flip the builder to Debian, # which has no `apk`). -FROM golang:1.27-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd AS builder +FROM golang:1.27-alpine@sha256:d200d2dd76b03a99b52651fd1325aff7dcd35422c35c01bac56571b0507f3deb AS builder RUN apk add --no-cache ca-certificates git tzdata @@ -34,7 +34,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ # ============================================================================= # Runtime stage # ============================================================================= -FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a RUN apk add --no-cache ca-certificates curl postgresql-client tzdata \ && adduser -D -H -u 1000 app diff --git a/examples/complex_wallet_examples/create_faucet_server/Dockerfile b/examples/complex_wallet_examples/create_faucet_server/Dockerfile index 94ee40198..b1a72485a 100644 --- a/examples/complex_wallet_examples/create_faucet_server/Dockerfile +++ b/examples/complex_wallet_examples/create_faucet_server/Dockerfile @@ -4,7 +4,7 @@ # platform and stay reproducible; the tag is kept so Dependabot preserves the # -alpine variant on bumps (a digest alone is variant-ambiguous and can flip the # builder to Debian, which has no `apk`). -FROM golang:1.27-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd AS builder +FROM golang:1.27-alpine@sha256:d200d2dd76b03a99b52651fd1325aff7dcd35422c35c01bac56571b0507f3deb AS builder # Install git, ca-certificates, and SQLite development libraries RUN apk add --no-cache git ca-certificates sqlite-dev gcc musl-dev @@ -31,7 +31,7 @@ RUN go mod tidy RUN CGO_ENABLED=1 GOOS=linux go build -a -installsuffix cgo -o faucet-server ./cmd/main.go # Final stage -FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a # Install ca-certificates for HTTPS requests RUN apk --no-cache add ca-certificates