From e322e71c7b7154fcfa240582fb2f87528d553b54 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 10:25:29 +0000 Subject: [PATCH] build(deps): bump the docker group across 2 directories with 4 updates Bumps the docker group with 3 updates in the / directory: golang, debian and alpine. Bumps the docker group with 1 update in the /sandbox directory: python. Updates `golang` from `5d2b868` to `b305420` Updates `debian` from `0104b33` to `60eac75` Updates `alpine` from 3.20 to 3.24 Updates `python` from `a3ab0b9` to `b27df58` --- updated-dependencies: - dependency-name: alpine dependency-version: 3.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker - dependency-name: debian dependency-version: bookworm-slim dependency-type: direct:production dependency-group: docker - dependency-name: golang dependency-version: 1.26.4-alpine dependency-type: direct:production dependency-group: docker - dependency-name: python dependency-version: 3.11.15-slim dependency-type: direct:production dependency-group: docker ... Signed-off-by: dependabot[bot] --- Dockerfile | 4 ++-- Dockerfile.mcp | 2 +- Dockerfile.proxy | 2 +- goreleaser.panda.Dockerfile | 2 +- goreleaser.proxy.Dockerfile | 2 +- goreleaser.server.Dockerfile | 2 +- sandbox/Dockerfile | 4 ++-- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index b26aea4c..1b575ccc 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,7 +9,7 @@ # ============================================================================= # Stage 1: Go builder # ============================================================================= -FROM golang:1.26-bookworm@sha256:5d2b868674b57c9e48cdd39e891acce4196b6926ca6d11e9c270a8f85106203d AS builder +FROM golang:1.26-bookworm@sha256:b305420a68d0f229d91eb3b3ed9e519fcf2cf5461da4bef997bf927e8c0bfd2b AS builder RUN apt-get update && apt-get install -y --no-install-recommends \ git ca-certificates && \ @@ -50,7 +50,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ # ============================================================================= # Stage 2: Runtime # ============================================================================= -FROM debian:bookworm-slim@sha256:0104b334637a5f19aa9c983a91b54c89887c0984081f2068983107a6f6c21eeb +FROM debian:bookworm-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df # Install runtime dependencies for Docker access and health checks RUN apt-get update && apt-get install -y --no-install-recommends \ diff --git a/Dockerfile.mcp b/Dockerfile.mcp index c137124b..05fe93de 100644 --- a/Dockerfile.mcp +++ b/Dockerfile.mcp @@ -29,7 +29,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ -o /ethpandaops-panda-server ./cmd/server # Runtime stage -FROM alpine:3.20 +FROM alpine:3.24 WORKDIR /app diff --git a/Dockerfile.proxy b/Dockerfile.proxy index 0fdb8997..efd74ba7 100644 --- a/Dockerfile.proxy +++ b/Dockerfile.proxy @@ -29,7 +29,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \ -o /ethpandaops-panda-proxy ./cmd/proxy # Runtime stage -FROM alpine:3.20 +FROM alpine:3.24 WORKDIR /app diff --git a/goreleaser.panda.Dockerfile b/goreleaser.panda.Dockerfile index 5d5a6157..451043fb 100644 --- a/goreleaser.panda.Dockerfile +++ b/goreleaser.panda.Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.24@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4 +FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b RUN apk add --no-cache ca-certificates tzdata diff --git a/goreleaser.proxy.Dockerfile b/goreleaser.proxy.Dockerfile index ad2bf615..58606a81 100644 --- a/goreleaser.proxy.Dockerfile +++ b/goreleaser.proxy.Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.24@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4 +FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b RUN apk add --no-cache ca-certificates tzdata diff --git a/goreleaser.server.Dockerfile b/goreleaser.server.Dockerfile index 2a3053fc..1c3755ed 100644 --- a/goreleaser.server.Dockerfile +++ b/goreleaser.server.Dockerfile @@ -1,7 +1,7 @@ # ============================================================================= # Runtime # ============================================================================= -FROM alpine:3.24@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4 +FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b # shadow provides usermod/groupmod, which the entrypoint uses to re-number the # panda user to the owner of the mounted credentials (non-1000 host UIDs). diff --git a/sandbox/Dockerfile b/sandbox/Dockerfile index 69e913d3..68418aae 100644 --- a/sandbox/Dockerfile +++ b/sandbox/Dockerfile @@ -9,7 +9,7 @@ # hard error rather than an unlocked source compile, and no C toolchain is # needed in either stage. -FROM python:3.11-slim@sha256:a3ab0b966bc4e91546a033e22093cb840908979487a9fc0e6e38295747e49ac0 AS builder +FROM python:3.11-slim@sha256:b27df5841f3355e9473f9a516d38a6783b6c8dfeacaf2d14a240f443b368ddb6 AS builder # uv (build-time only; never copied into the final image) COPY --from=ghcr.io/astral-sh/uv:0.11.17@sha256:03bdc89bb9798628846e60c3a9ad19006c8c3c724ccd2985a33145c039a0577b /uv /uvx /bin/ @@ -44,7 +44,7 @@ COPY modules/tracoor/python/tracoor.py /opt/ethpandaops-pkg/ethpandaops/tracoor. # so no toolchain is required to build it. RUN uv pip install --python /usr/local/bin/python3 --prefix /install --no-cache --no-deps /opt/ethpandaops-pkg -FROM python:3.11-slim@sha256:a3ab0b966bc4e91546a033e22093cb840908979487a9fc0e6e38295747e49ac0 +FROM python:3.11-slim@sha256:b27df5841f3355e9473f9a516d38a6783b6c8dfeacaf2d14a240f443b368ddb6 # librsvg provides rsvg-convert, which the chartkit library uses to rasterise its # self-contained SVG charts. The chart font (Inter) is embedded as a data URI; the extra