fix: bump go to v1.27.3, alpine to 3.24.3 and distroless to debian13

docker/Dockerfile

@@ -22,7 +22,7 @@ RUN --mount=type=cache,target=/app/frontend/node_modules/.vite,uid=1000,gid=1000
   BUILD_OUTPUT_PATH=dist vp -C frontend run build
 
 # Stage 2: Build Backend
-FROM golang:1.27.2-alpine AS backend-builder
+FROM golang:1.27.3-alpine AS backend-builder
 ARG BUILD_TAGS
 WORKDIR /build
 COPY ./backend/go.mod ./backend/go.sum ./
@@ -47,7 +47,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \
     .
 
 # Stage 3: Production Image
-FROM alpine:3.24.2
+FROM alpine:3.24.3
 WORKDIR /app
 
 RUN apk add --no-cache su-exec

docker/Dockerfile-distroless

@@ -1,7 +1,7 @@
 # This Dockerfile embeds a pre-built binary for the given Linux architecture
 # Binaries are supplied by GoReleaser.
 
-FROM gcr.io/distroless/static-debian12:nonroot
+FROM gcr.io/distroless/static-debian13:nonroot
 
 # TARGETARCH can be "amd64" or "arm64"
 ARG TARGETARCH

docker/Dockerfile-prebuilt

@@ -1,7 +1,7 @@
 # This Dockerfile embeds a pre-built binary for the given Linux architecture
 # Binaries are supplied by GoReleaser.
 
-FROM alpine:3.24.2
+FROM alpine:3.24.3
 
 # TARGETARCH can be "amd64" or "arm64"
 ARG TARGETARCH