From 31e79e5f78961d68d0dc83aae063fd643554208c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 20 Sep 2026 09:25:56 +0000
Subject: [PATCH] chore(deps): Bump the docker-images group across 1 directory
 with 2 updates

Bumps the docker-images group with 2 updates in the /release/docker directory: distroless/cc-debian13 and rust.


Updates `distroless/cc-debian13` from `c31ff9a` to `54df941`

Updates `rust` from 1.95-trixie to 1.97-trixie

---
updated-dependencies:
- dependency-name: distroless/cc-debian13
  dependency-version: nonroot
  dependency-type: direct:production
  dependency-group: docker-images
- dependency-name: rust
  dependency-version: 1.97-trixie
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 release/docker/Dockerfile.breg      | 2 +-
 release/docker/Dockerfile.builder   | 2 +-
 release/docker/Dockerfile.casework  | 2 +-
 release/docker/Dockerfile.discovery | 2 +-
 release/docker/Dockerfile.evidence  | 2 +-
 release/docker/Dockerfile.relay     | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/release/docker/Dockerfile.breg b/release/docker/Dockerfile.breg
index ab34e553b2..6870b3376e 100644
--- a/release/docker/Dockerfile.breg
+++ b/release/docker/Dockerfile.breg
@@ -28,7 +28,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
     && install -m 0644 /workspace/THIRD_PARTY_NOTICES /workspace/runtime-root/licenses/breg/THIRD_PARTY_NOTICES \
     && find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +
 
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c AS runtime
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:54df941ed0d06a1bd95ef5e0ce391fd8d9f94b64782dc9a60062727849ee3f97 AS runtime
 
 LABEL org.registrystack.runtime.uid="65532" \
       org.registrystack.runtime.gid="65532"
diff --git a/release/docker/Dockerfile.builder b/release/docker/Dockerfile.builder
index 2207fcfa83..161e8520bf 100644
--- a/release/docker/Dockerfile.builder
+++ b/release/docker/Dockerfile.builder
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e
 
-FROM rust:1.95-trixie@sha256:f49565f188ee00bc2a18dd418183f2c5f23ef7d6e691890517ed341a598f67c3 AS builder
+FROM rust:1.97-trixie@sha256:b1b3c9c0d921d7fa0a6d1f9ec7e4eab87f8c8ec97644c3d791450f131dec813f AS builder
 
 # pg_query 6.1.1 always invokes bindgen and regenerates its Rust protobuf types
 # when Cargo exposes a protoc command. Freeze the archive and build packages so
diff --git a/release/docker/Dockerfile.casework b/release/docker/Dockerfile.casework
index 7d6ffbfb61..1f8f28335c 100644
--- a/release/docker/Dockerfile.casework
+++ b/release/docker/Dockerfile.casework
@@ -29,7 +29,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
     && chmod 0700 /workspace/runtime-root/var/lib/registry-casework/audit \
     && find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +
 
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c AS runtime
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:54df941ed0d06a1bd95ef5e0ce391fd8d9f94b64782dc9a60062727849ee3f97 AS runtime
 
 LABEL org.registrystack.runtime.uid="65532" \
       org.registrystack.runtime.gid="65532"
diff --git a/release/docker/Dockerfile.discovery b/release/docker/Dockerfile.discovery
index 94f98b61ec..645d04dbd3 100644
--- a/release/docker/Dockerfile.discovery
+++ b/release/docker/Dockerfile.discovery
@@ -25,7 +25,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
     && install -m 0644 /workspace/LICENSE /workspace/runtime-root/licenses/discovery/LICENSE \
     && find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +
 
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c AS runtime
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:54df941ed0d06a1bd95ef5e0ce391fd8d9f94b64782dc9a60062727849ee3f97 AS runtime
 
 LABEL org.registrystack.runtime.uid="65532" \
       org.registrystack.runtime.gid="65532"
diff --git a/release/docker/Dockerfile.evidence b/release/docker/Dockerfile.evidence
index 52229c6e97..5e5087318c 100644
--- a/release/docker/Dockerfile.evidence
+++ b/release/docker/Dockerfile.evidence
@@ -25,7 +25,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
     && chmod 0700 /workspace/runtime-root/var/lib/registry-evidence/audit \
     && find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +
 
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c AS runtime
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:54df941ed0d06a1bd95ef5e0ce391fd8d9f94b64782dc9a60062727849ee3f97 AS runtime
 
 LABEL org.registrystack.runtime.uid="65532" \
       org.registrystack.runtime.gid="65532"
diff --git a/release/docker/Dockerfile.relay b/release/docker/Dockerfile.relay
index e03a93d8d8..af0ef58120 100644
--- a/release/docker/Dockerfile.relay
+++ b/release/docker/Dockerfile.relay
@@ -30,7 +30,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
     && chmod 0700 /workspace/runtime-root/var/lib/relay/audit \
     && find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +
 
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c AS runtime
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:54df941ed0d06a1bd95ef5e0ce391fd8d9f94b64782dc9a60062727849ee3f97 AS runtime
 
 LABEL org.registrystack.runtime.uid="65532" \
       org.registrystack.runtime.gid="65532"