fix: [CI-23751]: bump kaniko-executor base to 1.25.16 to fix symlink regression

kaniko-executor 1.25.15 (Chainguard fork) shipped an overly-strict
securejoin path check (upstream PR #326) that rejects valid `..`-relative
symlinks resolving to an in-image absolute path, e.g. the Java trust-store
link /etc/pki/java/cacerts, failing the build during tar extraction with
"symlink target ... resolves outside destination".

Upstream fixed this in chainguard-forks/kaniko v1.25.16 (PR #440, "store
symlink targets verbatim during tar extraction"). Bump FROM base image and
KANIKO_VERSION 1.25.15 -> 1.25.16 across all registry variants
(docker/ecr/gcr/acr/gar, amd64 + arm64).

Depends on harnesscommunity/kaniko-executor:1.25.16-linux-{amd64,arm64}
being published to Docker Hub before this can be built/released.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker/acr/Dockerfile.linux.amd64

@@ -1,5 +1,5 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-acr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-acr"]

docker/acr/Dockerfile.linux.arm64

@@ -1,8 +1,8 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
 
 ENV HOME /root
 ENV USER root
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/arm64/kaniko-acr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-acr"]

docker/docker/Dockerfile.linux.amd64

@@ -1,5 +1,5 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-docker /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-docker"]

docker/docker/Dockerfile.linux.arm64

@@ -1,8 +1,8 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
 
 ENV HOME /root
 ENV USER root
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/arm64/kaniko-docker /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-docker"]

docker/ecr/Dockerfile.linux.amd64

@@ -1,5 +1,5 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-ecr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-ecr"]

docker/ecr/Dockerfile.linux.arm64

@@ -1,8 +1,8 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
 
 ENV HOME /root
 ENV USER root
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 
 ADD release/linux/arm64/kaniko-ecr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-ecr"]

docker/gar/Dockerfile.linux.amd64

@@ -1,5 +1,5 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-gar /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-gar"]

docker/gar/Dockerfile.linux.arm64

@@ -1,8 +1,8 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
 
 ENV HOME /root
 ENV USER root
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 
 ADD release/linux/arm64/kaniko-gar /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-gar"]

docker/gcr/Dockerfile.linux.amd64

@@ -1,5 +1,5 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-gcr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-gcr"]

docker/gcr/Dockerfile.linux.arm64

@@ -1,8 +1,8 @@
-FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
+FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
 
 ENV HOME /root
 ENV USER root
-ENV KANIKO_VERSION=1.25.15
+ENV KANIKO_VERSION=1.25.16
 
 ADD release/linux/arm64/kaniko-gcr /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-gcr"]