[github-actions]

Moves the digests pin group to its newest stable upstream releases (hack/bump digests).

Pin	From	To	Released	Notes

Policy: review

• auto: image:docs-build:python:3.15.2-slim 3.15.2-slim -> 3.15.2-slim (digest), family base-image
• auto: image:examples:redis:8.10.3 8.10.3 -> 8.10.3 (digest), family base-image
• auto: image:packaging-images:debian:trixie-slim trixie-slim -> trixie-slim (digest), family base-image
• auto: packaging-fedora 44 -> 44 (digest), family base-image
• mixed groups: docs-build, examples, packaging-images (one group per PR)

Computed by hack/pins policy from this diff alone; labels do not count. review needs a human approval at the head commit; auto still needs green CI at the head.

Evidence

• CI: the ci.yml run hack/bot-ci-dispatch starts on branch autobump/digests at the head (gh run list -w ci.yml -e workflow_dispatch -b autobump/digests); this PR's own pull_request runs wait for approval (a GITHUB_TOKEN PR).

Group tests in the bump job

• tests/image_pins_test.sh: passed
• tests/audit_test.sh: passed
• tests/render_test.sh: passed

Notes

• repin: docs-build/Dockerfile:4 python:3.15.2-slim sha256:c4158543ecb725b99e57d129dfd43d761d4c43e4577b5e23326aabb223cf7f4e -> sha256:65a65fc7b30b06cb6df4930fd4650697cb23f4c2698ab81fc87e4b031bc36928
• repin: examples/dataplane/images/redis-dto.Dockerfile:14 redis:8.10.3 sha256:f245f4c83b84a9e9a0588da1c9456e579455310f0945d5db52cd2ba27f2000cc -> sha256:1f88291b4c57bdf249f02eb085a8669889b2d2954e91d4de5118a5da6b78dd53
• repin: hack/ci-images.env:10 archlinux:latest sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413 -> sha256:b1c2fe6e717bfd5673af8fc217e1e1c3ce0dcbb1d53c3414c8425e7ce79fc6d9
• repin: packaging/check.sh:15 fedora:44 sha256:43b29f65a41eb9c35e1cd5323e3bdf3b655c2357a9f4f1ff2f9c2798e5045d80 -> sha256:15da97ed9aa94dd3d92c3925eb89520f6c80e07ea7ee24cba848d1f8b6912b3e
• repin: packaging/check.sh:14 debian:trixie-slim sha256:f6b08b09a05725f9431502d3b5714f5c4576e82c1a84fa1debe0c24a7e0c3ec4 -> sha256:a72b4433de1cf7d6bae0c4cee74d0547f58601a643b3375f070c51600d63b6b2

[github-actions]

Not merged by the bot sweep at d19462136d04d16e86da78f4db982f699f95c113:

• needs review: policy: auto: image:docs-build:python:3.15.2-slim 3.15.2-slim -> 3.15.2-slim (digest), family base-image; auto: image:examples:redis:8.10.3 8.10.3 -> 8.10.3 (digest), family base-image; auto: image:packaging-images:debian:trixie-slim trixie-slim -> trixie-slim (digest), family base-image; auto: packaging-fedora 44 -> 44 (digest), family base-image; mixed groups: docs-build, examples, packaging-images (one group per PR); an approval of d194621 by a maintainer merges it