chore(deps): update docker

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

Author: bootc-bot[bot]

devenv/Containerfile.c10s

@@ -34,7 +34,7 @@ RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base as rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-04-19
+ARG rust_nightly=nightly-2026-04-25
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 

devenv/Containerfile.debian

@@ -37,7 +37,7 @@ RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base AS rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-04-19
+ARG rust_nightly=nightly-2026-04-25
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 

devenv/Containerfile.ubuntu

@@ -1,6 +1,6 @@
 # These aren't packages, just low-dependency binaries dropped in /usr/local/bin
 # so we can fetch them independently in a separate build.
-ARG base=docker.io/library/ubuntu:24.04
+ARG base=docker.io/library/ubuntu:26.04
 FROM $base AS base
 # Life is too short to care about dash
 RUN ln -sfr /bin/bash /bin/sh
@@ -49,7 +49,7 @@ RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base AS rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-04-19
+ARG rust_nightly=nightly-2026-04-25
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 

devenv/tool-versions.txt

@@ -5,12 +5,12 @@
 # renovate: datasource=github-releases depName=bootc-dev/bcvk
 bcvk@v0.14.0
 # renovate: datasource=github-releases depName=ossf/scorecard
-scorecard@v5.4.0
+scorecard@v5.5.0
 # renovate: datasource=github-releases depName=nushell/nushell
 nushell@0.112.2
 # renovate: datasource=github-releases depName=jj-vcs/jj
 jj@0.40.0
 # renovate: datasource=github-releases depName=nextest-rs/nextest
 cargo-nextest@0.9.133
 # renovate: datasource=github-releases depName=block/goose
-goose@v1.31.0
+goose@v1.32.0