From 456577162939c0e8ac265d67ad84b82b96686011 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 3 Apr 2026 21:03:29 +0000
Subject: [PATCH 1/3] chore(deps): update python3-slim docker digest to ffebef4

---
 MODULE.bazel | 2 +-
 WORKSPACE    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/MODULE.bazel b/MODULE.bazel
index f0b09d2f..bee15c53 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -78,7 +78,7 @@ use_repo(lock_repos, "pdm_deps")
 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 oci.pull(
     name = "python3-slim",
-    digest = "sha256:69ce3aed05675d284bee807e7c45e560e98db21fb1e4c670252b4ee0f2496b6d",  # "3.12-slim" as of 2025-01-25
+    digest = "sha256:ffebef43892dd36262fa2b042eddd3320d5510a21f8440dce0a650a3c124b51d",  # "3.12-slim" as of 2025-01-25
     image = "docker.io/library/python",
     platforms = [
         "linux/amd64",
diff --git a/WORKSPACE b/WORKSPACE
index 37010b4a..22e9db0b 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -36,7 +36,7 @@ load("@rules_oci//oci:pull.bzl", "oci_pull")
 # Keep in sync with MODULE.bazel
 oci_pull(
     name = "python3-slim",
-    digest = "sha256:69ce3aed05675d284bee807e7c45e560e98db21fb1e4c670252b4ee0f2496b6d",  # "3.12-slim" as of 2025-01-25
+    digest = "sha256:ffebef43892dd36262fa2b042eddd3320d5510a21f8440dce0a650a3c124b51d",  # "3.12-slim" as of 2025-01-25
     image = "docker.io/library/python",
     platforms = ["linux/amd64"],
 )

From 4f88736d4fa2d2a5895142b597737d3c49b94af0 Mon Sep 17 00:00:00 2001
From: lalten <git@laure.nz>
Date: Fri, 3 Apr 2026 21:38:52 +0000
Subject: [PATCH 2/3] Upgrade images

---
 MODULE.bazel |  6 +++---
 WORKSPACE    | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/MODULE.bazel b/MODULE.bazel
index bee15c53..c94de5be 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -78,7 +78,7 @@ use_repo(lock_repos, "pdm_deps")
 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 oci.pull(
     name = "python3-slim",
-    digest = "sha256:ffebef43892dd36262fa2b042eddd3320d5510a21f8440dce0a650a3c124b51d",  # "3.12-slim" as of 2025-01-25
+    digest = "sha256:fb83750094b46fd6b8adaa80f66e2302ecbe45d513f6cece637a841e1025b4ca",  # "3.14-slim" as of 2026-04-03
     image = "docker.io/library/python",
     platforms = [
         "linux/amd64",
@@ -87,8 +87,8 @@ oci.pull(
 )
 oci.pull(
     name = "distroless-cc",
-    digest = "sha256:ab14dfad5239a33d5a413a9c045803d71717e4c44c01c62a8073732e5c9cc1e1",  # "debug-nonroot" as of 2025-03-03
-    image = "gcr.io/distroless/cc-debian12",
+    digest = "sha256:d47b319b1047dff7cdee335e3e61468f3610fac20060653aabe3786d6ecba621",  # "debug-nonroot" as of 2026-04-03
+    image = "gcr.io/distroless/cc-debian13",
     platforms = [
         "linux/amd64",
         "linux/arm64/v8",
diff --git a/WORKSPACE b/WORKSPACE
index 22e9db0b..8fc2fb96 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -36,16 +36,16 @@ load("@rules_oci//oci:pull.bzl", "oci_pull")
 # Keep in sync with MODULE.bazel
 oci_pull(
     name = "python3-slim",
-    digest = "sha256:ffebef43892dd36262fa2b042eddd3320d5510a21f8440dce0a650a3c124b51d",  # "3.12-slim" as of 2025-01-25
+    digest = "sha256:fb83750094b46fd6b8adaa80f66e2302ecbe45d513f6cece637a841e1025b4ca",  # "3.14-slim" as of 2026-04-03
     image = "docker.io/library/python",
-    platforms = ["linux/amd64"],
+    platforms = ["linux/amd64", "linux/arm64/v8"],
 )
 
 oci_pull(
     name = "distroless-cc",
-    digest = "sha256:ab14dfad5239a33d5a413a9c045803d71717e4c44c01c62a8073732e5c9cc1e1",  # "debug-nonroot" as of 2025-03-03
-    image = "gcr.io/distroless/cc-debian12",
-    platforms = ["linux/amd64"],
+    digest = "sha256:d47b319b1047dff7cdee335e3e61468f3610fac20060653aabe3786d6ecba621",  # "debug-nonroot" as of 2026-04-03
+    image = "gcr.io/distroless/cc-debian13",
+    platforms = ["linux/amd64", "linux/arm64/v8"],
 )
 
 load("@rules_python//python:repositories.bzl", "py_repositories", "python_register_toolchains")

From 1878d74058a96606779cd7ed79d1dc831662dcb4 Mon Sep 17 00:00:00 2001
From: lalten <git@laure.nz>
Date: Fri, 3 Apr 2026 23:44:20 +0200
Subject: [PATCH 3/3] formatting

---
 WORKSPACE | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/WORKSPACE b/WORKSPACE
index 8fc2fb96..ae6ab0a7 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -38,14 +38,20 @@ oci_pull(
     name = "python3-slim",
     digest = "sha256:fb83750094b46fd6b8adaa80f66e2302ecbe45d513f6cece637a841e1025b4ca",  # "3.14-slim" as of 2026-04-03
     image = "docker.io/library/python",
-    platforms = ["linux/amd64", "linux/arm64/v8"],
+    platforms = [
+        "linux/amd64",
+        "linux/arm64/v8",
+    ],
 )
 
 oci_pull(
     name = "distroless-cc",
     digest = "sha256:d47b319b1047dff7cdee335e3e61468f3610fac20060653aabe3786d6ecba621",  # "debug-nonroot" as of 2026-04-03
     image = "gcr.io/distroless/cc-debian13",
-    platforms = ["linux/amd64", "linux/arm64/v8"],
+    platforms = [
+        "linux/amd64",
+        "linux/arm64/v8",
+    ],
 )
 
 load("@rules_python//python:repositories.bzl", "py_repositories", "python_register_toolchains")