From 6443eebcc6f02249ac8e535d090739de28480888 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Nov 2026 00:35:53 +0000
Subject: [PATCH] chore(deps): update docker.io/library/archlinux:base docker
 digest to ece6c97

---
 .github/workflows/ci.yml          | 2 +-
 scripts/bench-consumer            | 2 +-
 targets/aarch64-alarm.conf        | 2 +-
 targets/aarch64-aur.conf          | 2 +-
 targets/aarch64-core.conf         | 2 +-
 targets/aarch64-extra.conf        | 2 +-
 targets/armv7h-alarm.conf         | 2 +-
 targets/armv7h-aur.conf           | 2 +-
 targets/armv7h-core.conf          | 2 +-
 targets/armv7h-extra.conf         | 2 +-
 targets/loong64-core.conf         | 2 +-
 targets/loong64-extra.conf        | 2 +-
 targets/powerpc-base-any.conf     | 2 +-
 targets/powerpc-base.conf         | 2 +-
 targets/powerpc64-base-any.conf   | 2 +-
 targets/powerpc64-base.conf       | 2 +-
 targets/powerpc64le-base-any.conf | 2 +-
 targets/powerpc64le-base.conf     | 2 +-
 targets/riscv64-core.conf         | 2 +-
 targets/riscv64-extra.conf        | 2 +-
 targets/x86_64-core.conf          | 2 +-
 targets/x86_64-extra.conf         | 2 +-
 targets/x86_64-multilib.conf      | 2 +-
 tests/integration/10-pipeline.sh  | 2 +-
 tests/integration/20-client.sh    | 2 +-
 25 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e7cd85b3..4ca2ba0b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,7 @@ jobs:
             require: jq curl python3
           - leg: bash-gawk
             # tag: base
-            image: docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+            image: docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
             require: jq curl
           - leg: busybox
             # tag: 3.24
diff --git a/scripts/bench-consumer b/scripts/bench-consumer
index 13c6e653..da34e023 100755
--- a/scripts/bench-consumer
+++ b/scripts/bench-consumer
@@ -57,7 +57,7 @@ trap 'printf "bench-consumer: line %s: \"%s\" ended %s\n" "$LINENO" "$BASH_COMMA
 export LC_ALL=C
 
 # tag: base
-ARCH_IMAGE=docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+ARCH_IMAGE=docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 
 REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 ARCH="${BENCH_ARCH:-x86_64}"
diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf
index 06243ce9..2f3ee1be 100644
--- a/targets/aarch64-alarm.conf
+++ b/targets/aarch64-alarm.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the aarch64 image of
diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf
index 87fbee56..826aa362 100644
--- a/targets/aarch64-aur.conf
+++ b/targets/aarch64-aur.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the aarch64 image of
diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf
index 7c5d8370..f1dbfd39 100644
--- a/targets/aarch64-core.conf
+++ b/targets/aarch64-core.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the aarch64 image of
diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf
index 43eaa527..ce30fd94 100644
--- a/targets/aarch64-extra.conf
+++ b/targets/aarch64-extra.conf
@@ -27,7 +27,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the aarch64 image of
diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf
index 44d51479..6e4f6142 100644
--- a/targets/armv7h-alarm.conf
+++ b/targets/armv7h-alarm.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the armv7h image of
diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf
index c619b1d5..f0d89ca4 100644
--- a/targets/armv7h-aur.conf
+++ b/targets/armv7h-aur.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the armv7h image of
diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf
index fbf33669..445732c5 100644
--- a/targets/armv7h-core.conf
+++ b/targets/armv7h-core.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the armv7h image of
diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf
index d0bab2ff..2fbd9e5c 100644
--- a/targets/armv7h-extra.conf
+++ b/targets/armv7h-extra.conf
@@ -23,7 +23,7 @@ server = https://free.nchc.org.tw/archlinuxarm/$arch/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the armv7h image of
diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf
index 5a6d0e86..ca978439 100644
--- a/targets/loong64-core.conf
+++ b/targets/loong64-core.conf
@@ -22,7 +22,7 @@ server = https://mirror.iscas.ac.cn/loongarch/archlinux/$repo/os/$arch
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the loong64 image of
diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf
index 75bd13a8..cc55ee9d 100644
--- a/targets/loong64-extra.conf
+++ b/targets/loong64-extra.conf
@@ -28,7 +28,7 @@ server = https://mirror.iscas.ac.cn/loongarch/archlinux/$repo/os/$arch
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the loong64 image of
diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf
index f9552ffb..c6abfb15 100644
--- a/targets/powerpc-base-any.conf
+++ b/targets/powerpc-base-any.conf
@@ -14,7 +14,7 @@ db_server = https://repo.archlinuxpower.org/base/any
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc
diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf
index 943451fd..1330df20 100644
--- a/targets/powerpc-base.conf
+++ b/targets/powerpc-base.conf
@@ -13,7 +13,7 @@ db_server = https://repo.archlinuxpower.org/$repo/$arch
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc
diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf
index 37e7e439..9fbd48ef 100644
--- a/targets/powerpc64-base-any.conf
+++ b/targets/powerpc64-base-any.conf
@@ -14,7 +14,7 @@ db_server = https://repo.archlinuxpower.org/base/any
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc64
diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf
index bf6e5c18..dd352645 100644
--- a/targets/powerpc64-base.conf
+++ b/targets/powerpc64-base.conf
@@ -13,7 +13,7 @@ db_server = https://repo.archlinuxpower.org/$repo/$arch
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc64
diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf
index 87671c59..99a905ce 100644
--- a/targets/powerpc64le-base-any.conf
+++ b/targets/powerpc64le-base-any.conf
@@ -14,7 +14,7 @@ db_server = https://repo.archlinuxpower.org/base/any
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc64le
diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf
index c2314bfe..308ee6dd 100644
--- a/targets/powerpc64le-base.conf
+++ b/targets/powerpc64le-base.conf
@@ -13,7 +13,7 @@ db_server = https://repo.archlinuxpower.org/$repo/$arch
 db_signed = yes
 
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # tag: ppc64le
diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf
index a49573a2..d895df9c 100644
--- a/targets/riscv64-core.conf
+++ b/targets/riscv64-core.conf
@@ -27,7 +27,7 @@ server = https://mirrors.sustech.edu.cn/archriscv/repo/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the riscv64 image of
diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf
index f816daea..2706b040 100644
--- a/targets/riscv64-extra.conf
+++ b/targets/riscv64-extra.conf
@@ -32,7 +32,7 @@ server = https://mirrors.sustech.edu.cn/archriscv/repo/$repo
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root: the keyring files of the riscv64 image of
diff --git a/targets/x86_64-core.conf b/targets/x86_64-core.conf
index 00a0d3bd..24c77d37 100644
--- a/targets/x86_64-core.conf
+++ b/targets/x86_64-core.conf
@@ -22,7 +22,7 @@ server = https://mirrors.rit.edu/archlinux/$repo/os/$arch
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root is the verify image's own keyring. The keyring package is
diff --git a/targets/x86_64-extra.conf b/targets/x86_64-extra.conf
index 15608e97..f5af9ffd 100644
--- a/targets/x86_64-extra.conf
+++ b/targets/x86_64-extra.conf
@@ -22,7 +22,7 @@ server = https://mirrors.rit.edu/archlinux/$repo/os/$arch
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root is the verify image's own keyring. The keyring package is in
diff --git a/targets/x86_64-multilib.conf b/targets/x86_64-multilib.conf
index b9d85fae..2bc3600d 100644
--- a/targets/x86_64-multilib.conf
+++ b/targets/x86_64-multilib.conf
@@ -22,7 +22,7 @@ server = https://mirrors.rit.edu/archlinux/$repo/os/$arch
 # pacman verifies in the x86_64 Arch image, with Architecture set to the
 # target's arch: no emulation.
 # tag: base
-verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+verify_image = docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 verify_platform = linux/amd64
 
 # The trust root is the verify image's own keyring. The keyring package is in
diff --git a/tests/integration/10-pipeline.sh b/tests/integration/10-pipeline.sh
index e5e41156..7e6fba6b 100644
--- a/tests/integration/10-pipeline.sh
+++ b/tests/integration/10-pipeline.sh
@@ -33,7 +33,7 @@ set -euo pipefail
 . "$REPO_ROOT/tests/lib/harness.sh"
 
 # tag: base
-ARCH_IMAGE=docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+ARCH_IMAGE=docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 # tag: 3
 REGISTRY_IMAGE=docker.io/library/registry:3@sha256:d4032d4cc323c1731c707931ecada07a53076eac38e3b61ae57533f170f2c6c3
 # tag: 1.38
diff --git a/tests/integration/20-client.sh b/tests/integration/20-client.sh
index 46a736fa..7184a954 100644
--- a/tests/integration/20-client.sh
+++ b/tests/integration/20-client.sh
@@ -22,7 +22,7 @@ set -euo pipefail
 . "$REPO_ROOT/tests/lib/harness.sh"
 
 # tag: base
-ARCH_IMAGE=docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b058df6eaab18b737c27473a7234a40fdecb9413
+ARCH_IMAGE=docker.io/library/archlinux:base@sha256:ece6c971fec3c532fd508bce299a446deaf469feecbfe7c353e995bc1a5e7bba
 # tag: 3
 REGISTRY_IMAGE=docker.io/library/registry:3@sha256:d4032d4cc323c1731c707931ecada07a53076eac38e3b61ae57533f170f2c6c3
 # tag: 3.15-alpine