Bump the docker-deps group across 6 directories with 5 updates (#3843)

Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql.
Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres.
Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine.
Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang.


Updates `mysql` from `b306273` to `1f5b0ac`

Updates `postgres` from `5ec39c1` to `bfe50b2`

Updates `alpine` from 3.22 to 3.23

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `distroless/base-debian12` from `9e9b50d` to `f5a3067`

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

Updates `distroless/base-debian12` from `9e9b50d` to `f5a3067`

Updates `golang` from 1.25.4-bookworm to 1.25.5-bookworm

---
updated-dependencies:
- dependency-name: mysql
  dependency-version: '8.4'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: postgres
  dependency-version: '18.1'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

examples/deployment/docker/db_server/Dockerfile

@@ -1,4 +1,4 @@
-FROM mysql:8.4@sha256:b306273d4d36bc1a7f265130c3dd93c0462253af7634203e569add0403a7b273
+FROM mysql:8.4@sha256:1f5b0aca09cfa06d9a7b89b28d349c1e01ba0d31339a4786fbcb3d5927070130
 
 # TODO(roger2hk): Uncomment the below OS-level packages patch command as this is a temporary workaround to bypass the mysql8 gpg key rotation issue.
 # # Patch the OS-level packages and remove unneeded dependencies.

examples/deployment/docker/db_server/postgresql/Dockerfile

@@ -1,4 +1,4 @@
-FROM postgres:18.1@sha256:5ec39c188013123927f30a006987c6b0e20f3ef2b54b140dfa96dac6844d883f
+FROM postgres:18.1@sha256:bfe50b2b0ddd9b55eadedd066fe24c7c6fe06626185b73358c480ea37868024d
 
 # expects the build context to be: $GOPATH/src/github.com/google/trillian
 COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql

examples/deployment/docker/envsubst/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
 
 RUN apk add --no-cache gettext
 

examples/deployment/docker/log_server/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb as build
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as build
 
 WORKDIR /trillian
 
@@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server
 RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES
 
 # Make a minimal image.
-FROM gcr.io/distroless/base-debian12@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
+FROM gcr.io/distroless/base-debian12@sha256:f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
 
 COPY --from=build /go/bin/trillian_log_server /
 COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES

examples/deployment/docker/log_signer/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb as build
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e as build
 
 WORKDIR /trillian
 
@@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer
 RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES
 
 # Make a minimal image.
-FROM gcr.io/distroless/base-debian12@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
+FROM gcr.io/distroless/base-debian12@sha256:f5a3067027c2b322cd71b844f3d84ad3deada45ceb8a30f301260a602455070e
 
 COPY --from=build /go/bin/trillian_log_signer /
 COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES

integration/cloudbuild/testbase/Dockerfile

@@ -1,5 +1,5 @@
 # This Dockerfile builds a base image for Trillan integration tests.
-FROM golang:1.25.4-bookworm@sha256:e17419604b6d1f9bc245694425f0ec9b1b53685c80850900a376fb10cb0f70cb
+FROM golang:1.25.5-bookworm@sha256:2c7c65601b020ee79db4c1a32ebee0bf3d6b298969ec683e24fcbea29305f10e
 
 WORKDIR /testbase