From 2e4c31d07c20ad2bdf180f01eac26ef106704546 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Eric=20Meadows-J=C3=B6nsson?=
 <eric.meadows.jonsson@gmail.com>
Date: Sun, 31 May 2026 21:04:27 +0200
Subject: [PATCH] Bump Erlang/OTP to 27.3

OTP 27.2 rejects the new Let's Encrypt "Gen Y" certificate chain served
by hex.pm with a TLS key_usage_mismatch error, due to an over-strict
extended key usage check on intermediate CA certs. The fix shipped in
OTP 27.2.2 (public_key OTP-19240, GH-9208); 27.3 is the latest
multi-arch base image tag carrying it. Bump the Debian base date to match.
---
 .github/workflows/main.yml | 2 +-
 Dockerfile                 | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6ffab54..beaf66d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -17,7 +17,7 @@ jobs:
 
       - uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.24.0
         with:
-          otp-version: 27.2
+          otp-version: 27.3
           elixir-version: 1.18.1
 
       - run: mix deps.get
diff --git a/Dockerfile b/Dockerfile
index 25a1f72..f74d63b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG ELIXIR_VERSION=1.18.1
-ARG ERLANG_VERSION=27.2
-ARG DEBIAN_VERSION=bookworm-20241223-slim
+ARG ERLANG_VERSION=27.3
+ARG DEBIAN_VERSION=bookworm-20260518-slim
 
 FROM hexpm/elixir:${ELIXIR_VERSION}-erlang-${ERLANG_VERSION}-debian-${DEBIAN_VERSION} AS build