From ec14aa22af23324f1820adec1e70fb67c5554156 Mon Sep 17 00:00:00 2001
From: Kyle Mendell <ksm@ofkm.us>
Date: Wed, 21 Oct 2026 19:27:44 -0500
Subject: [PATCH] fix: bump go to v1.27.3, alpine to 3.24.3 and distroless to
 debian13

---
 .devcontainer/devcontainer.json | 2 +-
 backend/go.mod                  | 2 +-
 docker/Dockerfile               | 4 ++--
 docker/Dockerfile-distroless    | 2 +-
 docker/Dockerfile-prebuilt      | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 888f0b77..1a915c60 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -3,7 +3,7 @@
   "image": "ghcr.io/voidzero-dev/vite-plus:1.0.0",
   "features": {
     "ghcr.io/devcontainers/features/go:1": {
-      "version": "1.27"
+      "version": "1.27.3"
     }
   },
   "customizations": {
diff --git a/backend/go.mod b/backend/go.mod
index 9835b166..3d157a66 100644
--- a/backend/go.mod
+++ b/backend/go.mod
@@ -1,6 +1,6 @@
 module github.com/pocket-id/pocket-id/backend
 
-go 1.27.2
+go 1.27.3
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.47.2
diff --git a/docker/Dockerfile b/docker/Dockerfile
index a98d94bd..717cdbb0 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -22,7 +22,7 @@ RUN --mount=type=cache,target=/app/frontend/node_modules/.vite,uid=1000,gid=1000
   BUILD_OUTPUT_PATH=dist vp -C frontend run build
 
 # Stage 2: Build Backend
-FROM golang:1.27.2-alpine AS backend-builder
+FROM golang:1.27.3-alpine AS backend-builder
 ARG BUILD_TAGS
 WORKDIR /build
 COPY ./backend/go.mod ./backend/go.sum ./
@@ -47,7 +47,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \
     .
 
 # Stage 3: Production Image
-FROM alpine:3.24.2
+FROM alpine:3.24.3
 WORKDIR /app
 
 RUN apk add --no-cache su-exec
diff --git a/docker/Dockerfile-distroless b/docker/Dockerfile-distroless
index ca3819cd..55484168 100644
--- a/docker/Dockerfile-distroless
+++ b/docker/Dockerfile-distroless
@@ -1,7 +1,7 @@
 # This Dockerfile embeds a pre-built binary for the given Linux architecture
 # Binaries are supplied by GoReleaser.
 
-FROM gcr.io/distroless/static-debian12:nonroot
+FROM gcr.io/distroless/static-debian13:nonroot
 
 # TARGETARCH can be "amd64" or "arm64"
 ARG TARGETARCH
diff --git a/docker/Dockerfile-prebuilt b/docker/Dockerfile-prebuilt
index a34060b2..746ea94f 100644
--- a/docker/Dockerfile-prebuilt
+++ b/docker/Dockerfile-prebuilt
@@ -1,7 +1,7 @@
 # This Dockerfile embeds a pre-built binary for the given Linux architecture
 # Binaries are supplied by GoReleaser.
 
-FROM alpine:3.24.2
+FROM alpine:3.24.3
 
 # TARGETARCH can be "amd64" or "arm64"
 ARG TARGETARCH