chore(docker): update docker digests

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/alpine	final	digest	bec4ccd → 28bd5fe
docker.io/alpine	stage	digest	bec4ccd → 28bd5fe

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[DeepDiver1975]

🤖 Automated review by Claude Code review agent.

Overview

Renovate bot digest-pin update for v8/Dockerfile.multiarch. It bumps the pinned digest for docker.io/alpine:3.24.1 from bec4ccd... to 28bd5fe... in both the node-builder stage and the final stage. Net change: +2/-2 on a single file. The image tag (3.24.1) is unchanged — only the immutable digest is updated to track the latest rebuild of that tag.

Code quality / style

• Both occurrences are updated consistently to the same new digest, keeping the build and final stages aligned. Good — a mismatch here would be the main thing to flag.
• Digests are well-formed sha256: hex strings of the correct length (64 hex chars).
• No unexpected files touched; scope matches the stated intent.

Specific suggestions

• None. The change is mechanical and correct.

Potential issues / risks

• Low risk. The underlying tag and base image are unchanged; this only re-pins to the current digest of alpine:3.24.1.
• As with any base-image bump, CI building the image is the real validation that the new layer behaves identically. Renovate has automerge enabled for this PR, so passing CI is the gate.

LGTM — low-risk automated digest update.