Update Renovatebot Dockerfile Updates

[protocols-renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/dockerfile	syntax	digest	87999aa → ecfaec9
gcr.io/distroless/java25-debian13	final	digest	9ccf2b8 → fce4a1d
ubuntu (source)	stage	digest	3131b4c → 2260313

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

---

Note

Low Risk
Digest-only base image updates with no application or Dockerfile logic changes; typical low-risk maintenance with only indirect exposure to upstream image regressions.

Overview
Renovate refreshes pinned digests in docker/Dockerfile and docker/Dockerfile.distroless with no changes to build stages, commands, or runtime behavior.

Both files update the Dockerfile syntax pin and the Ubuntu 26.04 image used for the standard final stage and the distroless prep stage. The distroless variant also bumps the gcr.io/distroless/java25-debian13:nonroot runtime image digest.

This is a routine supply-chain refresh so CI and published images pull newer patched base layers while keeping the same image tags and multi-stage layout.

^{Reviewed by Cursor Bugbot for commit bad826e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud