From 8ea7a3cb226ae85278499ecf5ac369ba085f9a59 Mon Sep 17 00:00:00 2001
From: "cluster-stack-bot[bot]"
 <143188378+cluster-stack-bot[bot]@users.noreply.github.com>
Date: Fri, 30 Jan 2026 11:37:01 +0000
Subject: [PATCH] :seedling: Update Builder Image group

| datasource  | package                  | from    | to      |
| ----------- | ------------------------ | ------- | ------- |
| github-tags | adrienverge/yamllint     | v1.37.1 | v1.38.0 |
| docker      | docker.io/aquasec/trivy  | 0.68.2  | 0.69.0  |
| docker      | docker.io/library/alpine | 3.23.0  | 3.23.3  |
| github-tags | golangci/golangci-lint   | v2.7.2  | v2.8.0  |
---
 .builder-image-version.txt          |  2 +-
 .github/workflows/builder-image.yml |  2 +-
 .github/workflows/pr-lint.yml       |  2 +-
 images/builder/Dockerfile           | 10 +++++-----
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.builder-image-version.txt b/.builder-image-version.txt
index 71790396..abd41058 100644
--- a/.builder-image-version.txt
+++ b/.builder-image-version.txt
@@ -1 +1 @@
-0.2.3
+0.2.4
diff --git a/.github/workflows/builder-image.yml b/.github/workflows/builder-image.yml
index 11f8cc86..389c4839 100644
--- a/.github/workflows/builder-image.yml
+++ b/.github/workflows/builder-image.yml
@@ -32,4 +32,4 @@ jobs:
           file: ./images/builder/Dockerfile
           context: ./images/builder
           push: true
-          tags: ghcr.io/sovereigncloudstack/csctl-builder:0.2.3
+          tags: ghcr.io/sovereigncloudstack/csctl-builder:0.2.4
diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml
index 282c5f3f..f7f28d98 100644
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -19,7 +19,7 @@ jobs:
     if: github.event_name != 'pull_request_target' || !github.event.pull_request.draft
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/csctl-builder:0.2.3
+      image: ghcr.io/sovereigncloudstack/csctl-builder:0.2.4
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/images/builder/Dockerfile b/images/builder/Dockerfile
index 229c2ee1..5e4bda11 100644
--- a/images/builder/Dockerfile
+++ b/images/builder/Dockerfile
@@ -17,7 +17,7 @@
 # If you make changes to this Dockerfile run `make builder-image-push`.
 
 # Install Lychee
-FROM docker.io/library/alpine:3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 as lychee
+FROM docker.io/library/alpine:3.23.3@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659 as lychee
 # update: datasource=github-tags depName=lycheeverse/lychee versioning=semver
 ENV LYCHEE_VERSION="v0.15.1"
 # hadolint ignore=DL3018
@@ -28,9 +28,9 @@ RUN apk add --no-cache curl && \
   rm -rf /tmp/linux-amd64 /tmp/lychee-${LYCHEE_VERSION}.tgz
 
 # Install Golang CI Lint
-FROM docker.io/library/alpine:3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 as golangci
+FROM docker.io/library/alpine:3.23.3@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659 as golangci
 # update: datasource=github-tags depName=golangci/golangci-lint versioning=semver
-ENV GOLANGCI_VERSION="v2.7.2"
+ENV GOLANGCI_VERSION="v2.8.0"
 WORKDIR /
 # hadolint ignore=DL3018,DL4006
 RUN apk add --no-cache curl && \
@@ -40,7 +40,7 @@ RUN apk add --no-cache curl && \
 FROM docker.io/hadolint/hadolint:v2.14.0-alpine@sha256:7aba693c1442eb31c0b015c129697cb3b6cb7da589d85c7562f9deb435a6657c as hadolint
 
 # Install Trivy
-FROM docker.io/aquasec/trivy:0.68.2@sha256:05d0126976bdedcd0782a0336f77832dbea1c81b9cc5e4b3a5ea5d2ec863aca7 as trivy
+FROM docker.io/aquasec/trivy:0.69.0@sha256:33f816d414b9d582d25bb737ffa4a632ae34e222f7ec1b50252cef0ce2266006 as trivy
 
 ############################
 # csctl Build Image Base #
@@ -50,7 +50,7 @@ FROM docker.io/library/golang:1.22-bullseye
 # update: datasource=repology depName=debian_11/skopeo versioning=loose
 ENV SKOPEO_VERSION="1.2.2+dfsg1-1+b6"
 # update: datasource=github-tags depName=adrienverge/yamllint versioning=semver
-ENV YAMLLINT_VERSION="v1.37.1"
+ENV YAMLLINT_VERSION="v1.38.0"
 # update: datasource=github-tags depName=opt-nc/yamlfixer versioning=semver
 ENV YAMLFIXER_VERSION="0.9.15"