From f2bb5445208fc027e1557362c141ca8b503d266b Mon Sep 17 00:00:00 2001
From: "red-hat-konflux[bot]"
 <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Date: Fri, 14 Aug 2026 03:58:09 +0000
Subject: [PATCH] chore(deps): update docker images

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
---
 Dockerfile            | 2 +-
 Dockerfile.clients.rh | 4 ++--
 Dockerfile.cosign.rh  | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index bcdbff25044..fa1ad58b867 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,4 +15,4 @@
 
 # This is used to we scrap the go version and use in CI to get the latest go version
 # and we use dependabot to keep the go version up to date
-FROM golang:1.26.5
\ No newline at end of file
+FROM golang:1.26.6
\ No newline at end of file
diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index d80e1b88d60..412ba2369ae 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -7,7 +7,7 @@ FROM quay.io/securesign/fetch-tsa-certs@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd
 
 # Provides the Trusted Artifact Signer CLI binaries, rekor-cli and ec
 FROM quay.io/securesign/rekor-cli@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15 as rekor
-FROM registry.redhat.io/rhtas/ec-rhel9:0.8-1784063491@sha256:a16f2e7ac6bd48c0abf98c07d1004d8bc7f97114dc9e7d51d9cd8fb26fb43763 as ec
+FROM registry.redhat.io/rhtas/ec-rhel9:0.8-1786378072@sha256:3955fd4999167a9ee5d4a2704d19e876a7ca4ca7aafb20d01756cf3cc9ee4719 as ec
 
 # Provides the Trusted Artifact Signer CLI binaries trillian-createtree and trillian-updatetree
 FROM quay.io/securesign/trillian-createtree@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca as trillian-createtree
@@ -15,7 +15,7 @@ FROM quay.io/securesign/trillian-updatetree@sha256:dfae5377710f369844bc6502a6b10
 
 FROM quay.io/securesign/cli-tuftool@sha256:192b05958eabbc89d9e29d43ad0f9ceabea72377a4883c7b3652c99ca1cbea8a as tuf-tool
 
-FROM registry.redhat.io/ubi9/httpd-24@sha256:66b14ae828342819823fe01bc93117b54ce3999eaee8bc608de0be7459abc65b
+FROM registry.redhat.io/ubi9/httpd-24@sha256:fbd88338aeaa3f660d407d83752de1c7bd4bae5053641f6abe78add458cafdbc
 ENV APP_ROOT=/opt/app-root
 WORKDIR $APP_ROOT/src/
 
diff --git a/Dockerfile.cosign.rh b/Dockerfile.cosign.rh
index 43c90e4836d..b02e92298f2 100644
--- a/Dockerfile.cosign.rh
+++ b/Dockerfile.cosign.rh
@@ -1,6 +1,6 @@
 # Build stage
 
-FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS build-env
+FROM registry.redhat.io/ubi9/go-toolset:9.8-1786522985@sha256:444e81b3e88d8a68b92a081a7b3abc7d3fed2450f8473ea6b3caebf3bb73a0b8 AS build-env
 
 ENV GOEXPERIMENT=strictfipsruntime
 ENV CGO_ENABLED=1
@@ -26,7 +26,7 @@ RUN git config --global --add safe.directory /cosign && \
     git update-index --no-assume-unchanged Dockerfile.cosign.rh
 
 # Install Cosign
-FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:932acc913841596b4bdb1dfb6280987b81c2d9f4d337d0a57c9a98fc749e10bd
+FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:a29b4c112ffb29b725e60b7ac770cbceda55d2620c253fecca3d9f5e3fa5580c
 
 LABEL description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."
 LABEL io.k8s.description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."