From c4ad5e2f8a2fd46cbd360d7e9f8e4625d0d3f30c Mon Sep 17 00:00:00 2001 From: "red-hat-konflux[bot]" <126015336+red-hat-konflux[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 23:12:31 +0000 Subject: [PATCH] chore(deps): update docker images Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> --- Dockerfile.createtree.rh | 4 ++-- Dockerfile.database.rh | 2 +- Dockerfile.logserver.rh | 4 ++-- Dockerfile.logsigner.rh | 4 ++-- Dockerfile.netcat.rh | 2 +- Dockerfile.redis.rh | 2 +- Dockerfile.updatetree.rh | 4 ++-- examples/deployment/docker/db_server/Dockerfile | 2 +- examples/deployment/docker/db_server/postgresql/Dockerfile | 2 +- examples/deployment/docker/envsubst/Dockerfile | 2 +- examples/deployment/docker/log_server/Dockerfile | 2 +- examples/deployment/docker/log_signer/Dockerfile | 2 +- examples/deployment/kubernetes/mysql/image/Dockerfile | 2 +- 13 files changed, 17 insertions(+), 17 deletions(-) diff --git a/Dockerfile.createtree.rh b/Dockerfile.createtree.rh index 6d3f500275..65b72a907e 100644 --- a/Dockerfile.createtree.rh +++ b/Dockerfile.createtree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782377916@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build-env ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -23,7 +23,7 @@ RUN go mod download && \ gzip createtree-windows-amd64.exe # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:44bc70ef6e6ea9a70e353be97f4722e10358d09fbb9494ca943b2a641049690e AS deploy # Retrieve the binary from the previous stage COPY --from=build-env /opt/app-root/src/createtree / diff --git a/Dockerfile.database.rh b/Dockerfile.database.rh index f0de2d1b9a..ca06c56657 100644 --- a/Dockerfile.database.rh +++ b/Dockerfile.database.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/mariadb-105@sha256:426834701878341f9b65fc914928a60a76a390d7e1031932242a5f1c99fae34b +FROM registry.redhat.io/rhel9/mariadb-105@sha256:451583e8509429468577283407a33e29411f56e343f7381f7d722f8488de0fe9 USER root diff --git a/Dockerfile.logserver.rh b/Dockerfile.logserver.rh index cbb221d2e4..b1017a97d0 100644 --- a/Dockerfile.logserver.rh +++ b/Dockerfile.logserver.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782377916@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:44bc70ef6e6ea9a70e353be97f4722e10358d09fbb9494ca943b2a641049690e AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_server / diff --git a/Dockerfile.logsigner.rh b/Dockerfile.logsigner.rh index 2544e51474..4bb3f23714 100644 --- a/Dockerfile.logsigner.rh +++ b/Dockerfile.logsigner.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782377916@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_signer # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:44bc70ef6e6ea9a70e353be97f4722e10358d09fbb9494ca943b2a641049690e AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_signer / diff --git a/Dockerfile.netcat.rh b/Dockerfile.netcat.rh index f62bbfab90..7a871c2670 100644 --- a/Dockerfile.netcat.rh +++ b/Dockerfile.netcat.rh @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:44bc70ef6e6ea9a70e353be97f4722e10358d09fbb9494ca943b2a641049690e LABEL description="Netcat is a computer networking utility for reading from and writing to network connections using TCP or UDP." diff --git a/Dockerfile.redis.rh b/Dockerfile.redis.rh index 45e78b8dee..c88af09fae 100644 --- a/Dockerfile.redis.rh +++ b/Dockerfile.redis.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/redis-6@sha256:1f29a65a7db2a0cb53661b4c260482f0402b595587eed3840a0f980bc71695da +FROM registry.redhat.io/rhel9/redis-6@sha256:3a243218d38169a179692f76d050ac5226984d62c968b444c666ab7ecfa06317 LABEL description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." LABEL io.k8s.description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." diff --git a/Dockerfile.updatetree.rh b/Dockerfile.updatetree.rh index ebd47ff53b..929156cbbe 100644 --- a/Dockerfile.updatetree.rh +++ b/Dockerfile.updatetree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782377916@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build-env ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -24,7 +24,7 @@ RUN go mod download && \ # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:44bc70ef6e6ea9a70e353be97f4722e10358d09fbb9494ca943b2a641049690e AS deploy # Retrieve the binary from the previous stage COPY --from=build-env /opt/app-root/src/updatetree / diff --git a/examples/deployment/docker/db_server/Dockerfile b/examples/deployment/docker/db_server/Dockerfile index ca451c3132..21ed64e1e3 100644 --- a/examples/deployment/docker/db_server/Dockerfile +++ b/examples/deployment/docker/db_server/Dockerfile @@ -1,4 +1,4 @@ -FROM mysql:9.7@sha256:c11782aa2a96624c1efc121768641d96954faa136d6aa82751b032d8c426ffbc +FROM mysql:9.7@sha256:ad88e1c86cbf12ef52d0a0360cd4b774d22956c5ee9c565645fb019d7aacb6c3 # TODO(roger2hk): Uncomment the below OS-level packages patch command as this is a temporary workaround to bypass the mysql8 gpg key rotation issue. diff --git a/examples/deployment/docker/db_server/postgresql/Dockerfile b/examples/deployment/docker/db_server/postgresql/Dockerfile index 1fd762f570..1770657062 100644 --- a/examples/deployment/docker/db_server/postgresql/Dockerfile +++ b/examples/deployment/docker/db_server/postgresql/Dockerfile @@ -1,4 +1,4 @@ -FROM postgres:17.10@sha256:0027bef26712baaee437a4ea48fdf3d2d2e2bc5f0d81615374408ca320f3c7e3 +FROM postgres:17.10@sha256:5f050f770b427fbd477edee6c3968a72e5c6be97e050a7e368b2b74a9494a285 # expects the build context to be: $GOPATH/src/github.com/google/trillian COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql diff --git a/examples/deployment/docker/envsubst/Dockerfile b/examples/deployment/docker/envsubst/Dockerfile index 8884cca31d..8ce6d40fd9 100644 --- a/examples/deployment/docker/envsubst/Dockerfile +++ b/examples/deployment/docker/envsubst/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 +FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b RUN apk add --no-cache gettext diff --git a/examples/deployment/docker/log_server/Dockerfile b/examples/deployment/docker/log_server/Dockerfile index a44f56dc76..bf54885e7f 100644 --- a/examples/deployment/docker/log_server/Dockerfile +++ b/examples/deployment/docker/log_server/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 +FROM gcr.io/distroless/base-debian12@sha256:e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 COPY --from=build /go/bin/trillian_log_server / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/docker/log_signer/Dockerfile b/examples/deployment/docker/log_signer/Dockerfile index 64fe35509d..d2c1aa5c8a 100644 --- a/examples/deployment/docker/log_signer/Dockerfile +++ b/examples/deployment/docker/log_signer/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 +FROM gcr.io/distroless/base-debian12@sha256:e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 COPY --from=build /go/bin/trillian_log_signer / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/kubernetes/mysql/image/Dockerfile b/examples/deployment/kubernetes/mysql/image/Dockerfile index d3d515493f..9adf197d02 100644 --- a/examples/deployment/kubernetes/mysql/image/Dockerfile +++ b/examples/deployment/kubernetes/mysql/image/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM ubuntu:noble@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b +FROM ubuntu:noble@sha256:786a8b558f7be160c6c8c4a54f9a57274f3b4fb1491cf65146521ae77ff1dc54 # Patch the OS-level packages and remove unneeded dependencies. RUN apt-get update \