From 8da8afb5266d17d7f27373bbc35564bbbdc1e7a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 13:44:16 +0000 Subject: [PATCH] build(deps): bump the docker group across 2 directories with 2 updates Bumps the docker group with 1 update in the /.devcontainer directory: maven. Bumps the docker group with 1 update in the /resources/packaging directory: ubuntu. Updates `maven` from `6206ae5` to `166ca19` Updates `ubuntu` from `678c655` to `2260313` --- updated-dependencies: - dependency-name: maven dependency-version: 3-eclipse-temurin-26 dependency-type: direct:production dependency-group: docker - dependency-name: ubuntu dependency-version: '26.04' dependency-type: direct:production dependency-group: docker ... Signed-off-by: dependabot[bot] --- .devcontainer/Dockerfile | 2 +- resources/packaging/Dockerfile | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile index b1e652e2..1df5c786 100644 --- a/.devcontainer/Dockerfile +++ b/.devcontainer/Dockerfile @@ -18,7 +18,7 @@ # Maven + Temurin JDK 26 (satisfies the JDK 25+ floor; the CI baseline is # JDK 25, the current LTS — #92). -FROM maven:3-eclipse-temurin-26@sha256:6206ae5e460fbc803743b53addc31c5caca04582cf6a99f0f91df29c54954b52 +FROM maven:3-eclipse-temurin-26@sha256:166ca19b6b5fe1e924ab2d66b64ba9854c739f16210b94bbe0074b036c5c7992 RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ # version control and downloads (the maven image ships neither) diff --git a/resources/packaging/Dockerfile b/resources/packaging/Dockerfile index 2a12d95e..c881e3be 100644 --- a/resources/packaging/Dockerfile +++ b/resources/packaging/Dockerfile @@ -36,7 +36,7 @@ ARG SOURCE_DATE_EPOCH # binutils: the archive's JDK carries unstripped native libraries, so # jlink --strip-debug shells out to objcopy (Temurin's jmods come # pre-stripped, which is why the old Temurin build stage never needed it) -FROM ubuntu:26.04@sha256:678c6550cc43645e08669028bc177f50be4e7c5b8cca677067b1914d4afc7a03 AS runtime +FROM ubuntu:26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b AS runtime ARG APT_SNAPSHOT RUN echo "APT::Snapshot \"${APT_SNAPSHOT}\";" > /etc/apt/apt.conf.d/50snapshot \ && apt-get -o Acquire::Retries=3 update \ @@ -52,7 +52,7 @@ RUN set -eux; \ # fontconfig + DejaVu let batch image export (-i) render text headlessly # (Acquire::Retries: the arm64/riscv64 ports mirror drops connections # often enough under QEMU-length builds that one retry pass is not enough) -FROM ubuntu:26.04@sha256:678c6550cc43645e08669028bc177f50be4e7c5b8cca677067b1914d4afc7a03 +FROM ubuntu:26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b ARG APT_SNAPSHOT # the snapshot pin is dropped after installing so derived images and # debugging shells get the normal moving archive, not a frozen one