From 82c2771761ac508eec99153de9ffa8e8a6fbeb2b Mon Sep 17 00:00:00 2001
From: Wikid82 <176516789+Wikid82@users.noreply.github.com>
Date: Mon, 9 Nov 2026 14:10:16 +0000
Subject: [PATCH] chore(docker): refresh bundled proxy toolchain image

Rebuilds the prebuilt Caddy/CrowdSec toolchain image so the shipped
binaries pick up upstream fixes, and bumps the digest pin in the
Dockerfile.
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 6d2fcd40b..c68d4b25e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,8 +19,8 @@ ARG CHARON_TOOLCHAIN_IMAGE=ghcr.io/wikid82/charon-toolchain
 # NOT Renovate-tracked (a content-hash tag has no series to follow, N7) — the
 # toolchain-image.yml bot owns these two lines. DIGEST is the arch-independent
 # manifest-list (OCI index) digest, so one pin covers linux/amd64 + linux/arm64.
-ARG CHARON_TOOLCHAIN_TAG=caddy-crowdsec-a4f3ac6092c1f0d8
-ARG CHARON_TOOLCHAIN_DIGEST=sha256:2b7b20a825eefa8073681f4278d46ca10c60b88d130e52e91a53d9bb861aac81
+ARG CHARON_TOOLCHAIN_TAG=caddy-crowdsec-0d88a58b20ec535f
+ARG CHARON_TOOLCHAIN_DIGEST=sha256:524571962afcbdf0b0d5482ee6fe07504e248c865ed10f8454115d18332646f1
 
 # Stage selector — default consumes the prebuilt toolchain image (no compile).
 # Fork PRs / bootstrap / offline builds pass