Update container image digests

[dotnet-renovate-bot]

Automated Dependency Update

This PR contains the following updates:

Package	Update	Change
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	8143d3f → 65b656c
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	57861fa → 0f6feb7
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	73db6e4 → 0be8725
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	675c5f2 → 428be03
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	cc1824e → ad046c7
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	343ffd7 → f6b4797
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	056735e → 1608f79
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	ad7d2c3 → fc02e7d
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	68358db → b465025
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	4096bbf → 76e7e4f
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	71e1591 → d2582b6
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	620c418 → f33fe0c
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	cb5214c → c0651a1
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	98071fd → 2407884
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	69d2667 → 8491f14
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	8fdb1a4 → eaece21
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	b448e8d → 15dd63b
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	541bfc7 → 5782ea4
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	a9b4b8a → f4e3341
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	e309f18 → db1a34b
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	4961733 → 301907b
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	368e164 → a52c0bd
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	0afc4da → 3af9ca1
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	74c557a → 22acc70
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	594c1a8 → 718da2e
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	7f57a7e → f141d28
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	8102bd7 → e64f6c2
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	4c305ca → 73ca175
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	fd506e2 → 18ea7a1
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	d89b70a → bfa2dd9
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	6104a66 → 5cca2ad
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	b10bded → 133fdc3
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	d6d5523 → 9fe9680
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	55cafde → 4eeeb11
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	f2a0932 → ca817af
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	ec917e9 → 06a5561
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	804a557 → 30b0629
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	042c87f → f983894
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	a42042a → b903935
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	53845f6 → 2f681f6
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	7fea07e → e605ffd
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	e573b57 → 3a37282
mcr.microsoft.com/dotnet-buildtools/prereqs	digest	34918b5 → 91f43da

This PR has been created automatically by the .NET Renovate Bot to update one or more dependencies in your repo. Please review the changes and merge the PR if everything looks good.

[azure-pipelines]

Azure Pipelines:
Successfully started running 5 pipeline(s).
11 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.

[github-actions]

Workflow state for the Holistic Review Orchestrator.

{
  "version": 5,
  "last_dispatched_commit": "cc938818bf2a22b0d9fd91a01cf04a424b474e06",
  "last_dispatched_base_ref": "main",
  "last_dispatched_base_sha": "71d81c1705aa1f00e0b57073c97efdd5496f6b9f",
  "last_reviewed_commit": "cc938818bf2a22b0d9fd91a01cf04a424b474e06",
  "last_reviewed_base_ref": "main",
  "last_reviewed_base_sha": "71d81c1705aa1f00e0b57073c97efdd5496f6b9f",
  "last_recorded_worker_run_id": "29729489512",
  "review_attempt_commit": "",
  "review_attempt_base_ref": "",
  "review_attempt_count": 0,
  "max_review_attempts": 5,
  "review_history_format": "holistic-review-disclosure-v1",
  "review_history": [
    {
      "commit": "cc938818bf2a22b0d9fd91a01cf04a424b474e06",
      "review_id": 4733538032
    }
  ]
}

[github-actions]

Holistic Review

Motivation: This is an automated dependency update from dotnet-renovate-bot that bumps the pinned sha256 digests of mcr.microsoft.com/dotnet-buildtools/prereqs container images referenced across the CI pipeline templates and Helix queue definitions. Keeping these digest pins current picks up rebuilt prereq images (security patches, tool updates) while retaining reproducible, digest-locked builds.

Approach: The change touches four YAML files (eng/pipelines/common/templates/pipeline-with-resources.yml, eng/pipelines/coreclr/templates/helix-queues-setup.yml, eng/pipelines/installer/helix-queues-setup.yml, eng/pipelines/libraries/helix-queues-setup.yml). Every modified line is a @sha256:... digest update; the image repository and human-readable tag portion (e.g. azurelinux-3.0-net11.0-cross-arm64, alpine-3.24-helix-amd64) is unchanged on every line. Each image tag appears an even number of times in the diff, consistent with matched old/new digest pairs and no tag additions, removals, or renames.

Summary: Pure infrastructure digest-pin refresh with no source, test, or behavioral code changes. There is no application logic to reason about; correctness is validated by the pipeline itself successfully pulling and running against the new digests. Verdict: LGTM. Recommend confirming the associated CI legs (particularly the cross-build, Helix, and WASM legs whose images changed) are green before merge, since a bad prereq image would surface as pipeline failures rather than anything reviewable in the diff. No actionable findings.

Note

This review was generated by this repository's Holistic Review agentic workflow to complement the built-in Copilot review.

Generated by Holistic Review · 46.2 AIC · ⌖ 10.3 AIC · ⊞ 10K