update

Author: joecorall

Dockerfile

@@ -1,12 +1,12 @@
-FROM debian:trixie@sha256:01a723bf5bfb21b9dda0c9a33e0538106e4d02cce8f557e118dd61259553d598 as builder
+FROM debian:trixie@sha256:8f6a88feef3ed01a300dafb87f208977f39dccda1fd120e878129463f7fa3b8f as builder
 ARG DEBIAN_FRONTEND=noninteractive
 # renovate: datasource=github-releases depName=hashicorp-vault-cli packageName=hashicorp/vault
-ARG VAULT_VERSION=1.18.3
+ARG VAULT_VERSION=1.21.1
 RUN apt-get update && apt-get install -y wget unzip
 RUN wget -q https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
 RUN unzip vault_${VAULT_VERSION}_linux_amd64.zip
 
-FROM alpine:latest@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 as certs
+FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 as certs
 RUN apk --update add ca-certificates
 
 FROM scratch

main.tf

@@ -92,7 +92,7 @@ resource "docker_registry_image" "vault" {
   name       = local.image_name
   depends_on = [docker_image.vault, google_artifact_registry_repository.private]
   triggers = {
-    rebuild = docker_image.vault.image_id
+    dir_sha1 = sha1(join("", [for f in toset(["${path.module}/Dockerfile", "${path.module}/vault-server.hcl"]) : filesha1(f)]))
   }
 }