Update docker

Author: renovate[bot]

.github/workflows/publish-release-element-module.yml

@@ -25,7 +25,7 @@ jobs:
 
             - name: Generate Docker metadata of the existing image
               id: meta
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5
               with:
                   bake-target: docker-metadata-action
                   flavor: |
@@ -39,15 +39,15 @@ jobs:
 
             - name: Login to ghcr.io
               if: github.event_name != 'pull_request'
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
                   password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Login to registry.opencode.de
               if: github.event_name != 'pull_request'
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: registry.opencode.de
                   username: ${{ vars.DOCKER_OPENCODE_USERNAME }}
@@ -58,11 +58,11 @@ jobs:
               uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Build
               id: bake-load
-              uses: docker/bake-action@v6.3.0
+              uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
               with:
                   load: true
                   files: |
@@ -103,7 +103,7 @@ jobs:
 
             - name: Push
               id: bake-push
-              uses: docker/bake-action@v6.3.0
+              uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
               if: github.event_name != 'pull_request'
               with:
                   push: true

.github/workflows/publish-release-synapse-module.yml

@@ -21,15 +21,15 @@ jobs:
         steps:
             - name: Generate Docker metadata of the existing image
               id: meta-existing-tag
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5
               with:
                   images: ${{ env.DOCKER_IMAGE }}
                   tags: |
                       type=sha,prefix=
 
             - name: Generate Docker metadata of the new image
               id: meta-new-tags
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5
               with:
                   images: ${{ env.DOCKER_IMAGE }}
                   labels: |
@@ -46,7 +46,7 @@ jobs:
                   echo "FROM $SOURCE_IMAGE" > Dockerfile
 
             - name: Login to ghcr.io
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
@@ -56,11 +56,11 @@ jobs:
               uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Build and push
               id: build_and_push
-              uses: docker/build-push-action@v6
+              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
               with:
                   push: true
                   context: .

.github/workflows/synapse-module.yml

@@ -20,18 +20,18 @@ jobs:
             - uses: actions/checkout@v4
 
             - name: Login to ghcr.io
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
                   password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Generate Docker metadata
               id: meta
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5
               env:
                   DOCKER_METADATA_PR_HEAD_SHA: true
               with:
@@ -44,7 +44,7 @@ jobs:
                       type=sha,prefix=
 
             - name: Docker build and push
-              uses: docker/build-push-action@v6
+              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
               id: dockerBuild
               with:
                   push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}