From 2bea9f328d23d7e0e5df6f839e4eadc39aca8d51 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Jan 2026 18:07:22 +0000
Subject: [PATCH] Bump the docker-deps group across 5 directories with 3
 updates

Bumps the docker-deps group with 1 update in the /integration directory: golang.
Bumps the docker-deps group with 2 updates in the /internal/witness/cmd/feeder directory: golang and alpine.
Bumps the docker-deps group with 1 update in the /internal/witness/cmd/witness directory: golang.
Bumps the docker-deps group with 2 updates in the /trillian/examples/deployment/docker/ctfe directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 1 update in the /trillian/examples/deployment/docker/envsubst directory: alpine.


Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `alpine` from 3.22 to 3.23

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `distroless/base-debian12` from `9e9b50d` to `f5a3067`

Updates `alpine` from 3.22 to 3.23

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 integration/Dockerfile                                  | 2 +-
 internal/witness/cmd/feeder/Dockerfile                  | 4 ++--
 internal/witness/cmd/witness/Dockerfile                 | 4 ++--
 trillian/examples/deployment/docker/ctfe/Dockerfile     | 4 ++--
 trillian/examples/deployment/docker/envsubst/Dockerfile | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/integration/Dockerfile b/integration/Dockerfile
index 46e88c7a66..08b5235e0c 100644
--- a/integration/Dockerfile
+++ b/integration/Dockerfile
@@ -1,6 +1,6 @@
 # This Dockerfile builds a base image for the certificate-transparency-go CloudBuild integration testing.
 # See https://hub.docker.com/_/golang for the set of golang base images.
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb AS ct_testbase
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e AS ct_testbase
 
 WORKDIR /testbase
 
diff --git a/internal/witness/cmd/feeder/Dockerfile b/internal/witness/cmd/feeder/Dockerfile
index bc12f55dc1..39dccd52a3 100644
--- a/internal/witness/cmd/feeder/Dockerfile
+++ b/internal/witness/cmd/feeder/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb as builder
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as builder
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -18,7 +18,7 @@ COPY . .
 RUN go build -o /build/bin/feeder ./internal/witness/cmd/feeder
 
 # Build release image
-FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
 
 COPY --from=builder /build/bin/feeder /bin/feeder
 ENTRYPOINT ["/bin/feeder"]
diff --git a/internal/witness/cmd/witness/Dockerfile b/internal/witness/cmd/witness/Dockerfile
index d68cc0521a..cf4d1261ef 100644
--- a/internal/witness/cmd/witness/Dockerfile
+++ b/internal/witness/cmd/witness/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb AS builder
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e AS builder
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -18,7 +18,7 @@ COPY . .
 RUN go build -o /build/bin/witness ./internal/witness/cmd/witness
 
 # Build release image
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e
 
 COPY --from=builder /build/bin/witness /bin/witness
 ENTRYPOINT ["/bin/witness"]
diff --git a/trillian/examples/deployment/docker/ctfe/Dockerfile b/trillian/examples/deployment/docker/ctfe/Dockerfile
index 1ff23b96df..dacb2e247f 100644
--- a/trillian/examples/deployment/docker/ctfe/Dockerfile
+++ b/trillian/examples/deployment/docker/ctfe/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb as build
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as build
 
 ARG GOFLAGS=""
 ENV GOFLAGS=$GOFLAGS
@@ -12,7 +12,7 @@ COPY . .
 
 RUN go build ./trillian/ctfe/ct_server
 
-FROM gcr.io/distroless/base-debian12@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
+FROM gcr.io/distroless/base-debian12@sha256:f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
 
 COPY --from=build /build/ct_server /
 
diff --git a/trillian/examples/deployment/docker/envsubst/Dockerfile b/trillian/examples/deployment/docker/envsubst/Dockerfile
index 12cc110da5..c862181846 100644
--- a/trillian/examples/deployment/docker/envsubst/Dockerfile
+++ b/trillian/examples/deployment/docker/envsubst/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
 
 RUN apk add --no-cache gettext