From df3476c5c0002bdc8d83843a40c98d78e4d953e5 Mon Sep 17 00:00:00 2001
From: Gustavo Ocanto <gustavoocanto@gmail.com>
Date: Mon, 27 Jul 2026 17:01:31 +0800
Subject: [PATCH] Refresh Alpine base image package pins

---
 infra/docker/base-images/Dockerfile.builder               | 2 +-
 infra/docker/base-images/Dockerfile.runtime               | 6 +++---
 infra/docker/base-images/checksums/runtime-aarch64.sha256 | 2 +-
 infra/docker/base-images/checksums/runtime-x86_64.sha256  | 2 +-
 infra/docker/base-images/generate-checksums.sh            | 2 +-
 infra/makefile/build.mk                                   | 2 +-
 6 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/infra/docker/base-images/Dockerfile.builder b/infra/docker/base-images/Dockerfile.builder
index 0d207beb..b7907c7a 100644
--- a/infra/docker/base-images/Dockerfile.builder
+++ b/infra/docker/base-images/Dockerfile.builder
@@ -37,7 +37,7 @@ COPY checksums/ /tmp/checksums/
 #    fortify-headers separately (it must be added by path because its virtual
 #    provider name conflicts with the musl-provided headers already present).
 # 6. Clean up all temporary artifacts.
-RUN apk add --no-cache openssl=3.5.6-r0 && \
+RUN apk add --no-cache openssl=3.5.7-r0 && \
     target_arch="${TARGETARCH}"; \
     if [ -z "${target_arch}" ]; then \
         case "$(apk --print-arch)" in \
diff --git a/infra/docker/base-images/Dockerfile.runtime b/infra/docker/base-images/Dockerfile.runtime
index 736a03b6..12e51a46 100644
--- a/infra/docker/base-images/Dockerfile.runtime
+++ b/infra/docker/base-images/Dockerfile.runtime
@@ -30,7 +30,7 @@ COPY checksums/ /tmp/checksums/
 # 4. Remove openssl — it is only needed for the signing step and should not
 #    remain in the runtime image.
 # 5. Clean up all temporary artifacts.
-RUN apk add --no-cache openssl=3.5.6-r0 && \
+RUN apk add --no-cache openssl=3.5.7-r0 && \
     target_arch="${TARGETARCH}"; \
     if [ -z "${target_arch}" ]; then \
         case "$(apk --print-arch)" in \
@@ -48,7 +48,7 @@ RUN apk add --no-cache openssl=3.5.6-r0 && \
         libsharpyuv-1.6.0-r0.apk \
         libwebp-1.6.0-r0.apk \
         musl-1.2.5-r23.apk \
-        tzdata-2026b-r0.apk \
+        tzdata-2026c-r0.apk \
         zlib-1.3.2-r0.apk \
     ; do \
         wget -qO "/tmp/local-repo/${apk_arch}/${apk_pkg}" "${APK_BASE_URL}/${apk_arch}/${apk_pkg}" || exit 1; \
@@ -68,6 +68,6 @@ RUN apk add --no-cache openssl=3.5.6-r0 && \
         | cat - /tmp/APKINDEX.unsigned.tar.gz \
         > "/tmp/local-repo/${apk_arch}/APKINDEX.tar.gz" && \
     apk add --no-cache --no-network --repositories-file /dev/null --repository /tmp/local-repo musl=1.2.5-r23 libwebp && \
-    apk add --no-cache --no-network "/tmp/local-repo/${apk_arch}/tzdata-2026b-r0.apk" && \
+    apk add --no-cache --no-network "/tmp/local-repo/${apk_arch}/tzdata-2026c-r0.apk" && \
     apk del --no-cache openssl && \
     rm -rf /tmp/local-repo /tmp/checksums /tmp/apk-sign.rsa /tmp/sig /tmp/sig.tar /tmp/APKINDEX.unsigned.tar.gz /etc/apk/keys/apk-sign.rsa.pub
diff --git a/infra/docker/base-images/checksums/runtime-aarch64.sha256 b/infra/docker/base-images/checksums/runtime-aarch64.sha256
index 984ad5ba..fea807ae 100644
--- a/infra/docker/base-images/checksums/runtime-aarch64.sha256
+++ b/infra/docker/base-images/checksums/runtime-aarch64.sha256
@@ -1,5 +1,5 @@
 5b5009c66c47bd7a49a1b0eb236b526a14b2ed6c0802cb82d41eb6f9ea852a59  libsharpyuv-1.6.0-r0.apk
 808eac0eba50a5a7de86e280f4337281eace15a6b10301ee04de3d39f212cfb9  libwebp-1.6.0-r0.apk
 6a3edd924ead1fad88a69e28c5775809af3026b322f58428001cd02fedc5299e  musl-1.2.5-r23.apk
-3649d55ead19c80e66fd5c210f8fdd5b20ccaf007d5ec862e6345aa54a4b5b0f  tzdata-2026b-r0.apk
+b274132e7e9d36985b9d3324c7e2d724b5b70610743b69f7fe5bc9082bd085aa  tzdata-2026c-r0.apk
 ecda4cc94fd18f90182f1d3a615889df5e0db9cf78926d11627dd23e06d2e6e8  zlib-1.3.2-r0.apk
diff --git a/infra/docker/base-images/checksums/runtime-x86_64.sha256 b/infra/docker/base-images/checksums/runtime-x86_64.sha256
index 6541e428..dedb729e 100644
--- a/infra/docker/base-images/checksums/runtime-x86_64.sha256
+++ b/infra/docker/base-images/checksums/runtime-x86_64.sha256
@@ -1,5 +1,5 @@
 68b1787f41c36e7b6d9def855c5663f2f1ab62fbcc599d38ce3487e75fc883ec  libsharpyuv-1.6.0-r0.apk
 4d5303958ee38a978501c330c23b62ef98993ae3c30afcd62444723f33da2477  libwebp-1.6.0-r0.apk
 4f3c4a7bf9f51d2c91007e333b17459362ffd881b4a343e8da07b6c50c4f4a0d  musl-1.2.5-r23.apk
-a172f7eedda93509d0dde2f892cf1e0c135969a30c0f19535deef7556aa910a0  tzdata-2026b-r0.apk
+50fbca92f9e6c5d003a291587c67b7bd9c084cb54d1b0b0f04e0ac5715b5ab72  tzdata-2026c-r0.apk
 f56dea63692059bd65854bb179b7551971a441000b0d98c5b031291ca0450b56  zlib-1.3.2-r0.apk
diff --git a/infra/docker/base-images/generate-checksums.sh b/infra/docker/base-images/generate-checksums.sh
index 68c0884f..cf7d04b3 100755
--- a/infra/docker/base-images/generate-checksums.sh
+++ b/infra/docker/base-images/generate-checksums.sh
@@ -57,7 +57,7 @@ RUNTIME_PACKAGES=(
     libsharpyuv-1.6.0-r0.apk
     libwebp-1.6.0-r0.apk
     musl-1.2.5-r23.apk
-    tzdata-2026b-r0.apk
+    tzdata-2026c-r0.apk
     zlib-1.3.2-r0.apk
 )
 
diff --git a/infra/makefile/build.mk b/infra/makefile/build.mk
index dca8b644..10120432 100644
--- a/infra/makefile/build.mk
+++ b/infra/makefile/build.mk
@@ -3,7 +3,7 @@
 BUILD_VERSION ?= latest
 BASE_GO_VERSION ?= 1.26.3
 BASE_ALPINE_VERSION ?= 3.23
-BASE_IMAGE_REVISION ?= 4
+BASE_IMAGE_REVISION ?= 5
 BASE_GO_IMAGE_VARIANT ?= alpine$(BASE_ALPINE_VERSION)
 BASE_GO_IMAGE_DIGEST ?= sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d
 BASE_ALPINE_IMAGE_DIGEST ?= sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11