Skip to content

chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72#51

Open
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gcr.io-distroless-static-nonroot
Open

chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72#51
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gcr.io-distroless-static-nonroot

Conversation

@scality-renovate

@scality-renovate scality-renovate Bot commented Jul 13, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
gcr.io/distroless/static final digest 963fa6cf7f8f72

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@scality-renovate
scality-renovate Bot requested a review from a team as a code owner July 13, 2026 04:08
@scality-renovate scality-renovate Bot added dependencies Pull requests that update a dependency file digest docker labels Jul 13, 2026
@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown

Dependency Bump Evaluation

Package: gcr.io/distroless/static:nonroot
Version change: Digest 963fa6c -> f7f8f72 (same tag, new build)
Bump type: Docker base image digest update

Changes:

  • Rebuilt distroless/static:nonroot image with updated digest pin
  • Distroless digest updates typically include updated CA certificates, timezone data, and security patches to the minimal Debian-based layer

Breaking changes: None. Same image tag and structure; only the content digest changed.

Security concerns: None. This is a routine security-positive update. Distroless images are minimal (no shell, no package manager) and maintained by Google. Digest pinning ensures reproducible builds.

Impact on codebase: None. The Go binary is statically compiled (CGO_ENABLED=0) and copied onto the base image. The base image only provides the filesystem structure, CA certificates, and the nonroot user/group entry (uid 65532). No application code is affected.

CI status: lint passed. build and test are still in progress.

Recommendation: SAFE TO MERGE (once CI is green)

Notes: This is a minimal-risk change. A digest pin update on a distroless base image with zero impact on application code. The renovate/stability-days check is pending, indicating the image has not yet met the configured minimum release age.

-- Claude Code

@scality-renovate
scality-renovate Bot force-pushed the renovate/gcr.io-distroless-static-nonroot branch from 2676af2 to f877119 Compare July 15, 2026 04:08
@scality-renovate scality-renovate Bot changed the title chore(deps): update gcr.io/distroless/static:nonroot docker digest to d29e660 chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72 Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file digest docker

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants