ci(deps): bump chainguard-dev/actions/melange-build-pkg from 1.6.31 to 1.6.32

[dependabot]

Bumps chainguard-dev/actions/melange-build-pkg from 1.6.31 to 1.6.32.

Release notes

Sourced from chainguard-dev/actions/melange-build-pkg's releases.

v1.6.32

What's Changed

• build(deps): bump the actions group across 8 directories with 6 updates by @​dependabot[bot] in chainguard-dev/actions#1024
• build(deps-dev): bump eslint from 9.39.4 to 10.8.0 in /otel-export by @​dependabot[bot] in chainguard-dev/actions#1015

Full Changelog: chainguard-dev/actions@v1.6.31...v1.6.32

Commits

• 7bd1e94 build(deps-dev): bump eslint from 9.39.4 to 10.8.0 in /otel-export (#1015)
• 70ea519 build(deps): bump the actions group across 8 directories with 6 updates (#1024)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Container image CVE report

base-jre-25

Scanner	Critical	Critical+High	Total
Trivy	✅ 0	✅ 0	0
Grype	✅ 0	✅ 0	0

base-monitoring

Scanner	Critical	Critical+High	Total
Trivy	✅ 0	✅ 0	0
Grype	✅ 0	⚠️ 1	8

Grype critical+high by component

Component	Findings
go.etcd.io/etcd/client/pkg/v3 v3.5.17	1

base-os

Scanner	Critical	Critical+High	Total
Trivy	✅ 0	✅ 0	0
Grype	✅ 0	✅ 0	0

debug

Scanner	Critical	Critical+High	Total
Trivy	✅ 0	✅ 0	0
Grype	✅ 0	⚠️ 17	28

Grype critical+high by component

Component	Findings
stdlib go1.25.12	12
jline-remote-telnet 3.30.4	2
golang.org/x/net v0.55.0	1
golang.org/x/text v0.37.0	1
jetty-security 12.0.34	1

_{Trivy counts fixed vulnerabilities only; Grype includes unfixed, so its totals run higher. Full reports are in the workflow artifacts.}