Incorrect Digest on customManager with self hosted registry

[Hysterua]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

38.18.10

Please tell us more about your question or problem

So I'm trying to ensure a package in the form FROM internal.artifactory/python:3.12-bullseye@sha256:testsha is kept up to date. This involves keeping both the python portion and the debian portion up to date. To do this I am using the following custom manager (for debian portion):

{
      "description": "Ensures debian base image is up to date",
      "customType": "regex",
      "fileMatch": ["^vNext/Dockerfile$"],
      "matchStrings": [
        "FROM (?<depName>.*):(?<verCompatibility>.*)-(?<currentValue>\\D+)@(?<currentDigest>sha256:.+)"
      ],
      "datasourceTemplate": "docker",
      "versioningTemplate": "debian",
      "extractVersionTemplate": "^{{verCompatibility}}-(?<version>[a-z]+)$"
    }

this successfully finds that there is a bookworm update as per the logs:

{
                 "depName": "internal.artifactory/python",
                 "currentValue": "bullseye",
                 "currentDigest": "sha256:1b01b1f5d53be39c5cb6e94cfc8fda2e71444aeaf36a9c27fb6ce7332577a81b",
                 "datasource": "docker",
                 "versioning": "debian",
                 "extractVersion": "^3.12-(?<version>[a-z]+)$",
                 "replaceString": "FROM internal.artifactory/python:3.12-bullseye@sha256:1b01b1f5d53be39c5cb6e94cfc8fda2e71444aeaf36a9c27fb6ce7332577a81b",
                 "updates": [
                   {
                     "bucket": "major",
                     "newVersion": "bookworm",
                     "newValue": "bookworm",
                     "newMajor": 12,
                     "newMinor": null,
                     "newPatch": null,
                     "updateType": "major",
                     "newDigest": "sha256:1320ae67bdc123c78ba664edf1b66faf94d6cc151e512676e457892dc047af71",
                     "branchName": "renovate/internal.artifactory-python-12.x"
                   },
                   {
                     "updateType": "digest",
                     "newValue": "bullseye",
                     "newDigest": "sha256:50ae6b409c0c332c9dce5af7ba92273762d44778f2e0697b3133dc5e81d682f9",
                     "branchName": "renovate/patch-+-digest"
                   }
                 ],
                 "packageName": "internal.artifactory/python",
                 "warnings": [],
                 "registryUrl": "https://internal.artifactory",
                 "lookupName": "python",
                 "currentVersion": "bullseye",
                 "isSingleVersion": true,
                 "fixedVersion": "bullseye"
               }

My problem is that the newDigest 1320ae67bdc123c78ba664edf1b66faf94d6cc151e512676e457892dc047af71 is the reference to 3.13-bookworm and not the expected 3.12-bookworm. Is there something I'm missing to enforce a certain newValue format or potentially include debian in a regex versioning template (somehow)?

Edit:

Additionally, I am finding the following issue on my build run could this be causing the issue?

DEBUG: GET https://internal.artifactory/v2/python/tags/list?n=10000 = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=15508)