From 2a85e1cd651f75054dfd345cdd90c52789b58156 Mon Sep 17 00:00:00 2001
From: "renovate-update-app[bot]"
 <291053684+renovate-update-app[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 08:19:59 +0000
Subject: [PATCH] Update Docker base images

---
 .github/workflows/ci.yml | 4 ++--
 BCI.dockerfile           | 4 ++--
 Dockerfile               | 2 +-
 test-server/Dockerfile   | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f2287c90..af211e16 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
         uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           advanced-security: false
-          version: 1.31.1
+          version: 1.32.0
           inputs: .
           collect: workflows,actions,dependabot
 
@@ -282,7 +282,7 @@ jobs:
           description: Process agent collecting per-process and per-container telemetry for SUSE Observability.
           component: stackstate-k8s-process-agent
           dockerfile: BCI.dockerfile
-          base-name: registry.suse.com/bci/bci-micro:15.7@sha256:f1427da6f40791aa5a9f73bb339674970ea93a2b158adc81bc99bcd1b7899a74
+          base-name: registry.suse.com/bci/bci-micro:15.7@sha256:dbfc093371c573a6628d896e73b1063b19f2e660f92b306816fd33694175dca4
 
       - name: Build, publish, and sign architecture image
         uses: StackVista/image-pipeline/.github/actions/push-single-arch@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1
diff --git a/BCI.dockerfile b/BCI.dockerfile
index 5db1e8b4..ae604fd8 100644
--- a/BCI.dockerfile
+++ b/BCI.dockerfile
@@ -1,11 +1,11 @@
-FROM registry.suse.com/bci/bci-micro:15.7@sha256:f1427da6f40791aa5a9f73bb339674970ea93a2b158adc81bc99bcd1b7899a74 AS final
+FROM registry.suse.com/bci/bci-micro:15.7@sha256:dbfc093371c573a6628d896e73b1063b19f2e660f92b306816fd33694175dca4 AS final
 ARG LONG_ARCH="x86_64"
 ARG SHORT_ARCH="amd64"
 ARG EBPF_SUBFOLDER="x86_64"
 RUN : # No-op command to create an explicit layer - this fixes a weird buildkit/buildx bug on macos arm
 
 # Temporary build stage image
-FROM registry.suse.com/bci/bci-base:15.7@sha256:79595412dc8da75bac1a5f9cc75c7d579523dbeeb6fc594d10b22967819760c3 AS chroot-builder
+FROM registry.suse.com/bci/bci-base:15.7@sha256:8cd100ae2ec5ab23d6ec7aa1c0fe2dc30ca852c609406097797c9d298b7decdd AS chroot-builder
 # Install system packages using builder image that has zypper
 COPY --from=final / /chroot/
 
diff --git a/Dockerfile b/Dockerfile
index 246be3dd..2e94becb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # Actual docker image construction #
 ####################################
 
-FROM ubuntu:jammy-20261020@sha256:076e7bf82319619f28dd0aa9c02ab34b055ad37100395b4f49a2ffba04fb5e11
+FROM ubuntu:jammy-20261110@sha256:466792876a82015afa7536917113759bd07210f6dcca1dc69f5ccf7ca4c38c1c
 LABEL maintainer="StackState <info@stackstate.com>"
 ARG LONG_ARCH="x86_64"
 ARG SHORT_ARCH="amd64"
diff --git a/test-server/Dockerfile b/test-server/Dockerfile
index 83751ee5..7b09c091 100644
--- a/test-server/Dockerfile
+++ b/test-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852
+FROM ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5
 
 COPY main /
 COPY config.json /