ci: bump the all-docker-dependencies group across 8 directories with 3 updates

[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the all-docker-dependencies group with 2 updates in the /.pipelines/build/dockerfiles directory: oss/v2/fluent/fluent-bit and windows/servercore.
Bumps the all-docker-dependencies group with 1 update in the /azure-ip-masq-merger directory: oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 1 update in the /azure-ipam directory: oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 1 update in the /azure-iptables-monitor directory: oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 1 update in the /bpf-prog/ipv6-hp-bpf directory: oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 2 updates in the /cilium-log-collector directory: oss/v2/fluent/fluent-bit and oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 1 update in the /cni directory: oss/go/microsoft/golang.
Bumps the all-docker-dependencies group with 1 update in the /cns directory: oss/go/microsoft/golang.

Updates oss/v2/fluent/fluent-bit from v4.2.3-16 to v4.2.3-18

Updates windows/servercore from 3a2a2fd to 0df5b1c

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Updates oss/go/microsoft/golang from be14ce4 to 8b85ed5

Updates oss/v2/fluent/fluent-bit from v4.2.3-16 to v4.2.3-18

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Updates oss/go/microsoft/golang from 8f638b0 to f71abd9

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

This PR updates pinned container base/build image references across multiple component and pipeline Dockerfiles to keep builds aligned with the latest published image digests/tags in MCR.

Changes:

• Bump MSFT Go builder image digest for mcr.microsoft.com/oss/go/microsoft/golang:1.26-azurelinux3.0 in several component Dockerfiles.
• Update Fluent Bit base image tag to mcr.microsoft.com/oss/v2/fluent/fluent-bit:v4.2.3-18 for cilium-log-collector (component + pipeline Dockerfile).
• Update Windows servercore:ltsc2022 digest pin in the pipeline npm Dockerfile and bump the Go digest for the ipv6-hp-bpf builder image 1.26.7.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
cns/Dockerfile	Updates MSFT Go builder image digest pin for the CNS build stage.
cni/Dockerfile	Updates MSFT Go builder image digest pin for the CNI build stage.
cilium-log-collector/Dockerfile	Updates MSFT Go builder image digest pin and bumps Fluent Bit base tag to v4.2.3-18.
bpf-prog/ipv6-hp-bpf/linux.Dockerfile	Updates MSFT Go 1.26.7 builder image digest pin.
azure-iptables-monitor/Dockerfile	Updates MSFT Go builder image digest pin for the build stage.
azure-ipam/Dockerfile	Updates MSFT Go builder image digest pin for the build stage.
azure-ip-masq-merger/Dockerfile	Updates MSFT Go builder image digest pin for the build stage.
.pipelines/build/dockerfiles/npm.Dockerfile	Updates Windows servercore:ltsc2022 digest pin used in pipeline packaging.
.pipelines/build/dockerfiles/cilium-log-collector.Dockerfile	Bumps Fluent Bit base tag to v4.2.3-18 used in pipeline packaging.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[dependabot]

Superseded by #4837.