tools/bump: bump the remaining container base images

Debian is resolved from the numeric tags, which exist only for released
versions: forky-slim is published today and is testing. Distroless
follows that same release rather than its own repository names, since
gcr answers for base-debian99 as readily as for base-debian13.

tools/bump/plan.go

@@ -26,6 +26,7 @@ func planLines(ctx context.Context, r *repo) []string {
 
 	lines = append(lines, planBuilders(ctx, r)...)
 	lines = append(lines, planLockstep(ctx, r)...)
+	lines = append(lines, planImages(ctx, r)...)
 
 	if version, err := oapiVersion(r); err != nil { //nolint:noinlineerr
 		lines = append(lines, "oapi-codegen: "+err.Error())
@@ -38,6 +39,31 @@ func planLines(ctx context.Context, r *repo) []string {
 	return lines
 }
 
+func planImages(ctx context.Context, r *repo) []string {
+	defs := imageBumps()
+	lines := make([]string, 0, len(defs))
+
+	for _, def := range defs {
+		have, err := currentImageRef(r, def)
+		if err != nil {
+			lines = append(lines, def.Name+": "+err.Error())
+
+			continue
+		}
+
+		want, err := def.Resolve(ctx, have)
+		if err != nil {
+			lines = append(lines, def.Name+": "+err.Error())
+
+			continue
+		}
+
+		lines = append(lines, gap(def.Name, have, want))
+	}
+
+	return lines
+}
+
 func planBuilders(ctx context.Context, r *repo) []string {
 	var lines []string