build(deps): bump the docker-production-dependencies group across 19 directories with 14 updates

src/accounting/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM --platform=${BUILDPLATFORM} mcr.microsoft.com/dotnet/sdk:8.0 AS builder
+FROM --platform=${BUILDPLATFORM} mcr.microsoft.com/dotnet/sdk:9.0 AS builder
 ARG TARGETARCH
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
@@ -21,7 +21,7 @@ RUN dotnet publish "./Accounting.csproj" -r linux-$TARGETARCH -c $BUILD_CONFIGUR
 
 # -----------------------------------------------------------------------------
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0
+FROM mcr.microsoft.com/dotnet/aspnet:9.0
 USER app
 WORKDIR /app
 COPY --from=publish /app/publish .

src/cart/src/Dockerfile

@@ -15,7 +15,7 @@
 # limitations under the License.
 
 # https://mcr.microsoft.com/v2/dotnet/sdk/tags/list
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:8.0 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:9.0 AS builder
 ARG TARGETARCH
 
 WORKDIR /usr/src/app/
@@ -30,7 +30,7 @@ RUN dotnet publish ./src/cart.csproj -r linux-musl-$TARGETARCH --no-restore -o /
 # -----------------------------------------------------------------------------
 
 # https://mcr.microsoft.com/v2/dotnet/runtime-deps/tags/list
-FROM mcr.microsoft.com/dotnet/runtime-deps:8.0-alpine3.20
+FROM mcr.microsoft.com/dotnet/runtime-deps:9.0-alpine3.20
 
 WORKDIR /usr/src/app/
 COPY --from=builder /cart/ ./

src/checkoutservice/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM golang:1.22-alpine AS builder
+FROM golang:1.23-alpine AS builder
 
 WORKDIR /usr/src/app/
 

src/checkoutservice/genproto/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM golang:1.22-alpine
+FROM golang:1.23-alpine
 
 WORKDIR /build
 

src/currency/Dockerfile

@@ -14,7 +14,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM alpine:3.18 AS builder
+FROM alpine:3.21 AS builder
 
 RUN apk update && apk add git cmake make g++ grpc-dev protobuf-dev linux-headers
 
@@ -38,7 +38,7 @@ RUN cd /currency \
     && make -j$(nproc || sysctl -n hw.ncpu || echo 1) install
 
 
-FROM alpine:3.18 AS release
+FROM alpine:3.21 AS release
 
 RUN apk update && apk add grpc-dev protobuf-dev
 COPY --from=builder /usr/local /usr/local

src/email/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM ruby:3.2.2-slim AS base
+FROM ruby:3.4.1-slim AS base
 
 FROM base AS builder
 

src/flagd-ui/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM node:20 AS builder
+FROM node:23 AS builder
 
 WORKDIR /app
 
@@ -15,7 +15,7 @@ RUN npm run build
 
 # -----------------------------------------------------------------------------
 
-FROM node:20-alpine
+FROM node:23-alpine
 
 WORKDIR /app
 

src/frontend/Dockerfile

@@ -2,15 +2,15 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM node:20-alpine AS deps
+FROM node:23-alpine AS deps
 RUN apk add --no-cache libc6-compat
 
 WORKDIR /app
 
 COPY ./src/frontend/package*.json ./
 RUN npm ci
 
-FROM node:20-alpine AS builder
+FROM node:23-alpine AS builder
 RUN apk add --no-cache libc6-compat protobuf-dev protoc
 WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
@@ -20,7 +20,7 @@ COPY ./src/frontend .
 RUN npm run grpc:generate
 RUN npm run build
 
-FROM node:20-alpine AS runner
+FROM node:23-alpine AS runner
 WORKDIR /app
 RUN apk add --no-cache protobuf-dev protoc
 

src/image-provider/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM nginx:1.27.0-otel
+FROM nginx:1.27.3-otel
 
 RUN apt-get update ; apt-get install lsb-release --no-install-recommends --no-install-suggests -y
 

src/kafka/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM apache/kafka:3.7.0
+FROM apache/kafka:3.9.0
 
 USER root
 ARG OTEL_JAVA_AGENT_VERSION

src/load-generator/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM python:3.12-slim-bookworm AS base
+FROM python:3.13-slim-bookworm AS base
 
 FROM base AS builder
 RUN apt-get -qq update \

src/payment/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM node:22-alpine AS build
+FROM node:23-alpine AS build
 
 WORKDIR /usr/src/app/
 
@@ -12,7 +12,7 @@ RUN apk add --no-cache python3 make g++ && npm ci --omit=dev
 
 # -----------------------------------------------------------------------------
 
-FROM node:22-alpine
+FROM node:23-alpine
 
 USER node
 WORKDIR /usr/src/app/

src/productcatalogservice/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM golang:1.22-alpine AS builder
+FROM golang:1.23-alpine AS builder
 
 WORKDIR /usr/src/app/
 

src/productcatalogservice/genproto/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM golang:1.22-alpine
+FROM golang:1.23-alpine
 
 WORKDIR /build
 

src/quote/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM php:8.3-cli AS base
+FROM php:8.4-cli AS base
 
 ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/
 RUN chmod +x /usr/local/bin/install-php-extensions \
@@ -17,7 +17,7 @@ CMD ["php", "public/index.php"]
 USER www-data
 EXPOSE ${QUOTE_PORT}
 
-FROM composer:2.7 AS vendor
+FROM composer:2.8 AS vendor
 
 WORKDIR /tmp/
 COPY ./src/quote/composer.json .

src/react-native-app/android.Dockerfile

@@ -6,7 +6,7 @@
 # https://github.com/react-native-community/docker-android
 # Choosing a tag where the Android build tools match what we have in android/build.gradle to avoid the
 # container having to download them
-FROM reactnativecommunity/react-native-android:v13.2.1 AS builder
+FROM reactnativecommunity/react-native-android:v15.0 AS builder
 
 WORKDIR /reactnativesrc/
 COPY . .

src/recommendation/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM python:3.12-slim-bookworm AS base
+FROM python:3.13-slim-bookworm AS base
 
 #
 # Fetch requirements

src/recommendation/genproto/Dockerfile

@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM python:3.12-slim-bookworm
+FROM python:3.13-slim-bookworm
 
 WORKDIR /build
 

src/shipping/Dockerfile

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM --platform=${BUILDPLATFORM} rust:1.76 AS builder
+FROM --platform=${BUILDPLATFORM} rust:1.83 AS builder
 ARG TARGETARCH
 ARG TARGETPLATFORM
 ARG BUILDPLATFORM