docker: update trixie base image
What changed, and why it matters
This commit simply updates the pinned SHA256 digest of the Debian 'trixie' base Docker image used for building and testing. It is a routine dependency refresh with no code changes and no security-relevant content described by the project.
No security action needed; treat as routine maintenance. If desired, verify the new digest against the official Debian image registry to confirm supply-chain integrity.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one line in contrib/Dockerfile_trixie, replacing the SHA256 pin of the debian:trixie base image from one digest to another. There are no changes to library source code, build scripts, installed packages, or configuration. The commit message is purely operational (‘docker: update trixie base image’).
Changed components
contrib/Dockerfile_trixieInspect captured patch +1 / −1
diff --git a/contrib/Dockerfile_trixie b/contrib/Dockerfile_trixie
index 436e7fc..9452248 100644
--- a/contrib/Dockerfile_trixie
+++ b/contrib/Dockerfile_trixie
@@ -5,7 +5,7 @@
# and for linux/arm64:
# DOCKER_BUILDKIT=1 docker build . -t blockstream/wallycore -f Dockerfile_trixie --platform linux/arm64 --build-arg TARGETARCH=arm64
#
-FROM debian:trixie@sha256:35b8ff74ead4880f22090b617372daff0ccae742eb5674455d542bef71ef1999
+FROM debian:trixie@sha256:4ae67669760b807c19f23902a3fd7c121a6a70cf2ae709035674b23e712e4d62
WORKDIR /root
COPY trixie_deps.sh ./deps.sh
COPY requirements.txt ./contrib/requirements.txt
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.