Signed-off-by: Ryan Northey <ryan@synca.io>

…49d2923f35d6` (#22283)

docker: Bump `distroless/base-debian11:nonroot` -> `49d2923f35d6`

Signed-off-by: Ryan Northey <ryan@synca.io>

repo: Release `1.20.7`

Signed-off-by: Ryan Northey <ryan@synca.io>

Signed-off-by: Otto van der Schaaf <ovanders@redhat.com>

Some certificates have expired, causing test failures.

Signed-off-by: Otto van der Schaaf <ovanders@redhat.com>

…stra-2.2-upstream-1.20

As we pulled in refreshed certificates from upstream, we now need
to do a partial refresh for the ones introduced in  our 0150925.
(The refresh from upstream also touched the ca & intermediate ca,
which means that the certificates we introduced ourselves are now
inconsistent with respect to who signed them -- thus causing test
failures).

Signed-off-by: Otto van der Schaaf <ovanders@redhat.com>