From 7d8684704197e48cad2aeb0dfcca5f4f13794222 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 12 Jul 2026 12:37:54 +0000
Subject: [PATCH] Update all non-major updates

---
 .github/workflows/detect-releases.yml | 2 +-
 .github/workflows/docker.yml          | 6 +++---
 Dockerfile.template                   | 2 +-
 latest/Dockerfile                     | 2 +-
 stable/Dockerfile                     | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/detect-releases.yml b/.github/workflows/detect-releases.yml
index 37d1f95..70c9fd8 100644
--- a/.github/workflows/detect-releases.yml
+++ b/.github/workflows/detect-releases.yml
@@ -85,7 +85,7 @@ jobs:
       #     PASSWORD: ${{ secrets.PASSWORD }}
 
       - name: Commit with appropriate docker tag
-        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7
+        uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7
         with:
           commit_message: Update ${{ inputs.channel }} to ${{ needs.check-new-version.outputs.build_version }}
 
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 70c3f45..bc940a9 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -33,7 +33,7 @@ jobs:
 
       - name: Generate image tags from push tags/workflow input
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6
         with:
           images: ghcr.io/extrange/ibkr
           flavor: |
@@ -48,14 +48,14 @@ jobs:
             type=match,pattern=docker-(\d+.\d+.\w+)+\-(stable|latest),group=2,value=${{ inputs.tag}}
 
       - name: Log in to the Container registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
         with:
           # Build context
           context: ${{ steps.channel.outputs.channel }}
diff --git a/Dockerfile.template b/Dockerfile.template
index aeceab4..999041a 100644
--- a/Dockerfile.template
+++ b/Dockerfile.template
@@ -1,4 +1,4 @@
-FROM debian:trixie-20260421@sha256:35b8ff74ead4880f22090b617372daff0ccae742eb5674455d542bef71ef1999 AS setup
+FROM debian:13@sha256:d07d1b51c39f51188e60be9b64e6bf769fa94e187f092bc32b91305cfa34ba5a AS setup
 
 ENV IBC_VERSION=3.22.0
 
diff --git a/latest/Dockerfile b/latest/Dockerfile
index dcb9863..c2502fe 100644
--- a/latest/Dockerfile
+++ b/latest/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:trixie-20260421@sha256:35b8ff74ead4880f22090b617372daff0ccae742eb5674455d542bef71ef1999 AS setup
+FROM debian:13@sha256:d07d1b51c39f51188e60be9b64e6bf769fa94e187f092bc32b91305cfa34ba5a AS setup
 
 ENV IBC_VERSION=3.22.0
 
diff --git a/stable/Dockerfile b/stable/Dockerfile
index 50362f2..6e5fbd1 100644
--- a/stable/Dockerfile
+++ b/stable/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:trixie-20260421@sha256:35b8ff74ead4880f22090b617372daff0ccae742eb5674455d542bef71ef1999 AS setup
+FROM debian:13@sha256:d07d1b51c39f51188e60be9b64e6bf769fa94e187f092bc32b91305cfa34ba5a AS setup
 
 ENV IBC_VERSION=3.22.0