From d19462136d04d16e86da78f4db982f699f95c113 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 8 Nov 2026 13:50:18 +0000
Subject: [PATCH] chore(digests): move the digests the registries re-pointed

---
 docs-build/Dockerfile                          | 2 +-
 examples/dataplane/images/redis-dto.Dockerfile | 2 +-
 hack/ci-images.env                             | 2 +-
 packaging/check.sh                             | 4 ++--
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs-build/Dockerfile b/docs-build/Dockerfile
index c18ec8a8..8f9051e7 100644
--- a/docs-build/Dockerfile
+++ b/docs-build/Dockerfile
@@ -1,4 +1,4 @@
 # Interpreter pin for the docs toolchain. Not built: it exists so Dependabot's
 # docker ecosystem can bump it. The Docs workflow's `container: image:` and
 # docs-build/lock.sh use this exact image; tests/docs_test.sh checks they match.
-FROM python:3.15.2-slim@sha256:c4158543ecb725b99e57d129dfd43d761d4c43e4577b5e23326aabb223cf7f4e
+FROM python:3.15.2-slim@sha256:65a65fc7b30b06cb6df4930fd4650697cb23f4c2698ab81fc87e4b031bc36928
diff --git a/examples/dataplane/images/redis-dto.Dockerfile b/examples/dataplane/images/redis-dto.Dockerfile
index 568706a6..7d08a765 100644
--- a/examples/dataplane/images/redis-dto.Dockerfile
+++ b/examples/dataplane/images/redis-dto.Dockerfile
@@ -11,7 +11,7 @@
 # redis:8.10.2 is Debian trixie (docker-library/official-images library/redis),
 # so libdto is built on trixie too and links against the same glibc.
 
-ARG REDIS_IMAGE=redis:8.10.3@sha256:f245f4c83b84a9e9a0588da1c9456e579455310f0945d5db52cd2ba27f2000cc
+ARG REDIS_IMAGE=redis:8.10.3@sha256:1f88291b4c57bdf249f02eb085a8669889b2d2954e91d4de5118a5da6b78dd53
 # intel/DTO has no release after v1.1 (2024-07); this main commit carries the
 # CMake build and the DTO_ACCEL_CONFIG_SUPPORT / DTO_NUMA_SUPPORT switches.
 ARG DTO_COMMIT=fbf41a67e3719a1c9a8692b6952afe0d88043c76
diff --git a/hack/ci-images.env b/hack/ci-images.env
index fcc74139..a85d1234 100644
--- a/hack/ci-images.env
+++ b/hack/ci-images.env
@@ -7,4 +7,4 @@ ACTIONLINT_IMAGE=rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d
 
 # Arch is rolling: pacman needs a current keyring, so the tag stays latest and
 # scripts/images-lock repin moves the digest beside it (images.unpinned).
-ARCHLINUX_IMAGE=archlinux:latest@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+ARCHLINUX_IMAGE=archlinux:latest@sha256:b1c2fe6e717bfd5673af8fc217e1e1c3ce0dcbb1d53c3414c8425e7ce79fc6d9
diff --git a/packaging/check.sh b/packaging/check.sh
index 11670578..434f1b1f 100755
--- a/packaging/check.sh
+++ b/packaging/check.sh
@@ -11,8 +11,8 @@
 set -euo pipefail
 
 NFPM_IMAGE="${NFPM_IMAGE:-goreleaser/nfpm:v2.48.0@sha256:d57a1452e7a019896b355f7b1ec67262278f6c503631f652d4fce7aef9ac8df7}"
-DEBIAN_IMAGE="${DEBIAN_IMAGE:-debian:trixie-slim@sha256:f6b08b09a05725f9431502d3b5714f5c4576e82c1a84fa1debe0c24a7e0c3ec4}"
-FEDORA_IMAGE="${FEDORA_IMAGE:-fedora:44@sha256:43b29f65a41eb9c35e1cd5323e3bdf3b655c2357a9f4f1ff2f9c2798e5045d80}"
+DEBIAN_IMAGE="${DEBIAN_IMAGE:-debian:trixie-slim@sha256:a72b4433de1cf7d6bae0c4cee74d0547f58601a643b3375f070c51600d63b6b2}"
+FEDORA_IMAGE="${FEDORA_IMAGE:-fedora:44@sha256:15da97ed9aa94dd3d92c3925eb89520f6c80e07ea7ee24cba848d1f8b6912b3e}"
 BREW_IMAGE="${BREW_IMAGE:-ghcr.io/homebrew/brew:7.0.11@sha256:e50d8c463824f72b0c2972815ebff2d59982280201cb0a650ecb452d737a5e5a}"
 NIX_IMAGE="${NIX_IMAGE:-nixos/nix:2.35.4@sha256:f159a58f390677f41e8e900a74b6e2f9c7f27b364122ae6acf7a652ce6c551c0}"