Bump the docker-deps group across 7 directories with 6 updates (#3827)

Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql.
Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres.
Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine.
Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12.
Bumps the docker-deps group with 1 update in the /examples/deployment/kubernetes/mysql/image directory: ubuntu.
Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang.


Updates `mysql` from `5367102` to `b306273`

Updates `postgres` from `073e7c8` to `1ffc019`

Updates `alpine` from `4bcff63` to `4b7ce07`

Updates `golang` from 1.25.1-bookworm to 1.25.3-bookworm

Updates `distroless/base-debian12` from `fa15492` to `9e9b50d`

Updates `golang` from 1.25.1-bookworm to 1.25.3-bookworm

Updates `distroless/base-debian12` from `fa15492` to `9e9b50d`

Updates `ubuntu` from `4e0171b` to `0950623`

Updates `golang` from 1.25.1-bookworm to 1.25.3-bookworm

---
updated-dependencies:
- dependency-name: mysql
  dependency-version: '8.4'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: postgres
  dependency-version: '18.0'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: alpine
  dependency-version: '3.22'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.3-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: 9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.3-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: distroless/base-debian12
  dependency-version: 9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: ubuntu
  dependency-version: jammy
  dependency-type: direct:production
  dependency-group: docker-deps
- dependency-name: golang
  dependency-version: 1.25.3-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

examples/deployment/docker/db_server/Dockerfile

@@ -1,4 +1,4 @@
-FROM mysql:8.4@sha256:5367102acfefeaa47eb0eb57c8d4f8b96c8c14004859131eac9bbfaa62f81e34
+FROM mysql:8.4@sha256:b306273d4d36bc1a7f265130c3dd93c0462253af7634203e569add0403a7b273
 
 # TODO(roger2hk): Uncomment the below OS-level packages patch command as this is a temporary workaround to bypass the mysql8 gpg key rotation issue.
 # # Patch the OS-level packages and remove unneeded dependencies.

examples/deployment/docker/db_server/postgresql/Dockerfile

@@ -1,4 +1,4 @@
-FROM postgres:18.0@sha256:073e7c8b84e2197f94c8083634640ab37105effe1bc853ca4d5fbece3219b0e8
+FROM postgres:18.0@sha256:1ffc019dae94eca6b09a49ca67d37398951346de3c3d0cfe23d8d4ca33da83fb
 
 # expects the build context to be: $GOPATH/src/github.com/google/trillian
 COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql

examples/deployment/docker/envsubst/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.22@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1
+FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
 
 RUN apk add --no-cache gettext
 

examples/deployment/docker/log_server/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.1-bookworm@sha256:c423747fbd96fd8f0b1102d947f51f9b266060217478e5f9bf86f145969562ee as build
+FROM golang:1.25.3-bookworm@sha256:ee420c17fa013f71eca6b35c3547b854c838d4f26056a34eb6171bba5bf8ece4 as build
 
 WORKDIR /trillian
 
@@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server
 RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES
 
 # Make a minimal image.
-FROM gcr.io/distroless/base-debian12@sha256:fa15492938650e1a5b87e34d47dc7d99a2b4e8aefd81b931b3f3eb6bb4c1d2f6
+FROM gcr.io/distroless/base-debian12@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
 
 COPY --from=build /go/bin/trillian_log_server /
 COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES

examples/deployment/docker/log_signer/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.1-bookworm@sha256:c423747fbd96fd8f0b1102d947f51f9b266060217478e5f9bf86f145969562ee as build
+FROM golang:1.25.3-bookworm@sha256:ee420c17fa013f71eca6b35c3547b854c838d4f26056a34eb6171bba5bf8ece4 as build
 
 WORKDIR /trillian
 
@@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer
 RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES
 
 # Make a minimal image.
-FROM gcr.io/distroless/base-debian12@sha256:fa15492938650e1a5b87e34d47dc7d99a2b4e8aefd81b931b3f3eb6bb4c1d2f6
+FROM gcr.io/distroless/base-debian12@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8
 
 COPY --from=build /go/bin/trillian_log_signer /
 COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES

examples/deployment/kubernetes/mysql/image/Dockerfile

@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM ubuntu:jammy@sha256:4e0171b9275e12d375863f2b3ae9ce00a4c53ddda176bd55868df97ac6f21a6e
+FROM ubuntu:jammy@sha256:09506232a8004baa32c47d68f1e5c307d648fdd59f5e7eaa42aaf87914100db3
 
 # Patch the OS-level packages and remove unneeded dependencies.
 RUN apt-get update \

integration/cloudbuild/testbase/Dockerfile

@@ -1,5 +1,5 @@
 # This Dockerfile builds a base image for Trillan integration tests.
-FROM golang:1.25.1-bookworm@sha256:c423747fbd96fd8f0b1102d947f51f9b266060217478e5f9bf86f145969562ee
+FROM golang:1.25.3-bookworm@sha256:ee420c17fa013f71eca6b35c3547b854c838d4f26056a34eb6171bba5bf8ece4
 
 WORKDIR /testbase