Bump the docker-deps group across 5 directories with 3 updates (#1758)

dependabot[bot] · web-flow · commit e87af8ac107d · 2026-02-02T10:02:03.000Z
Bumps the docker-deps group with 1 update in the /integration directory: golang.
Bumps the docker-deps group with 2 updates in the /internal/witness/cmd/feeder directory: golang and alpine.
Bumps the docker-deps group with 1 update in the /internal/witness/cmd/witness directory: golang.
Bumps the docker-deps group with 2 updates in the /trillian/examples/deployment/docker/ctfe directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 1 update in the /trillian/examples/deployment/docker/envsubst directory: alpine.


Updates `golang` from 1.25.5-bookworm to 1.25.6-bookworm

Updates `golang` from 1.25.5-bookworm to 1.25.6-bookworm

Updates `alpine` from `865b95f` to `2510918`

Updates `golang` from 1.25.5-bookworm to 1.25.6-bookworm

Updates `golang` from 1.25.5-bookworm to 1.25.6-bookworm

Updates `distroless/base-debian12` from `f5a3067` to `347a41e`

Updates `alpine` from `865b95f` to `2510918`

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.6-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.6-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.6-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: 347a41e7f263ea7f7aba1735e5e5b1439d9e41a9f09179229f8c13ea98ae94cf
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
...

Signed-off-by: dependabot[bot] &lt;support@github.com&gt;
Co-authored-by: dependabot[bot] &lt;49699333+dependabot[bot]@users.noreply.github.com&gt;
diff --git a/integration/Dockerfile b/integration/Dockerfile
@@ -1,6 +1,6 @@
 # This Dockerfile builds a base image for the certificate-transparency-go CloudBuild integration testing.
 # See https://hub.docker.com/_/golang for the set of golang base images.
-FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e AS ct_testbase
+FROM golang:1.25.6-bookworm@sha256:2f768d462dbffbb0f0b3a5171009f162945b086f326e0b2a8fd5d29c3219ff14 AS ct_testbase
 
 WORKDIR /testbase
 
diff --git a/internal/witness/cmd/feeder/Dockerfile b/internal/witness/cmd/feeder/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as builder
+FROM golang:1.25.6-bookworm@sha256:2f768d462dbffbb0f0b3a5171009f162945b086f326e0b2a8fd5d29c3219ff14 as builder
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -18,7 +18,7 @@ COPY . .
 RUN go build -o /build/bin/feeder ./internal/witness/cmd/feeder
 
 # Build release image
-FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
+FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
 
 COPY --from=builder /build/bin/feeder /bin/feeder
 ENTRYPOINT ["/bin/feeder"]
diff --git a/internal/witness/cmd/witness/Dockerfile b/internal/witness/cmd/witness/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e AS builder
+FROM golang:1.25.6-bookworm@sha256:2f768d462dbffbb0f0b3a5171009f162945b086f326e0b2a8fd5d29c3219ff14 AS builder
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -18,7 +18,7 @@ COPY . .
 RUN go build -o /build/bin/witness ./internal/witness/cmd/witness
 
 # Build release image
-FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e
+FROM golang:1.25.6-bookworm@sha256:2f768d462dbffbb0f0b3a5171009f162945b086f326e0b2a8fd5d29c3219ff14
 
 COPY --from=builder /build/bin/witness /bin/witness
 ENTRYPOINT ["/bin/witness"]
diff --git a/trillian/examples/deployment/docker/ctfe/Dockerfile b/trillian/examples/deployment/docker/ctfe/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as build
+FROM golang:1.25.6-bookworm@sha256:2f768d462dbffbb0f0b3a5171009f162945b086f326e0b2a8fd5d29c3219ff14 as build
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -12,7 +12,7 @@ COPY . .
 
 RUN go build ./trillian/ctfe/ct_server
 
-FROM gcr.io/distroless/base-debian12@sha256:f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
+FROM gcr.io/distroless/base-debian12@sha256:347a41e7f263ea7f7aba1735e5e5b1439d9e41a9f09179229f8c13ea98ae94cf
 
 COPY --from=build /build/ct_server /
 
diff --git a/trillian/examples/deployment/docker/envsubst/Dockerfile b/trillian/examples/deployment/docker/envsubst/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
+FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
 
 RUN apk add --no-cache gettext
 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62`
	`1`	`+FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659`
`2`	`2`
`3`	`3`	`RUN apk add --no-cache gettext`
`4`	`4`