Update base images and dependencies to address vulnerabilities

images/alpine/Dockerfile

@@ -15,7 +15,7 @@
 # Update the date below (check https://hub.docker.com/_/alpine/tags) to get the
 # alpine edge base image, which has a faster release cadence than alpine:latest
 # (which tracks alpine stable), to pick up security patches more quickly.
-FROM alpine:20240606
+FROM alpine:20250108
 
 ARG IMAGE_ARG
 ENV IMAGE=${IMAGE_ARG}

images/git-custom-k8s-auth/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM google/cloud-sdk:491.0.0 as builder
+FROM google/cloud-sdk:548.0.0 as builder
 # https://github.com/GoogleCloudPlatform/cloud-sdk-docker/blob/master/Dockerfile
 
 ARG AWS_IAM_AUTHENTICATOR_VERSION
@@ -30,7 +30,7 @@ RUN apt update && apt install -y unzip && curl -fsSLO https://github.com/Azure/k
 # alpine edge base image, which has a faster release cadence than alpine:latest
 # (which tracks alpine stable), to pick up security patches more quickly.
 # TODO: switch to Distroless https://github.com/GoogleContainerTools/distroless (help-wanted)
-FROM alpine:20240606
+FROM alpine:20250108
 
 ARG IMAGE_ARG
 ENV IMAGE=${IMAGE_ARG}

images/git-custom-k8s-auth/cloudbuild.yaml

@@ -22,5 +22,5 @@ steps:
 substitutions:
   _GIT_TAG: "12345"
   # Prefer 0.5.x series (not 0.6.x) for now.
-  _AWS_IAM_AUTHENTICATOR_VERSION: "0.5.21"
-  _AZURE_KUBELOGIN_VERSION: "0.1.4"
+  _AWS_IAM_AUTHENTICATOR_VERSION: "0.7.9"
+  _AZURE_KUBELOGIN_VERSION: "0.2.13"

images/git/Dockerfile

@@ -15,7 +15,7 @@
 # Update the date below (check https://hub.docker.com/_/alpine/tags) to get the
 # alpine edge base image, which has a faster release cadence than alpine:latest
 # (which tracks alpine stable), to pick up security patches more quickly.
-FROM alpine:20240606
+FROM alpine:20250108
 
 ARG IMAGE_ARG
 ENV IMAGE=${IMAGE_ARG}