chore(deps): pin dependencies (#349)

Co-authored-by: Renovate GitHub Bot <[email protected]> Co-authored-by: Xuan Hu <[email protected]>
serious-scaffold · Mar 4, 2024 · 8196bef · 8196bef
1 parent ff7c845
commit 8196bef
Show file tree

Hide file tree

Showing 8 changed files with 14 additions and 14 deletions.
diff --git a/.gitlab/workflows/commitlint.yml b/.gitlab/workflows/commitlint.yml
@@ -1,6 +1,6 @@
 commitlint:
   image:
-    name: commitlint/commitlint:18.6.2
+    name: commitlint/commitlint:18.6.2@sha256:d82e66abdeda7fb4584c3206ddcf9cc4c6c9cb67e433030de0904fed3dab662a
     entrypoint: [""]
   interruptible: true
   rules:

diff --git a/.gitlab/workflows/devcontainer.yml b/.gitlab/workflows/devcontainer.yml
@@ -1,5 +1,5 @@
 dev-container-publish:
-  image: docker:25.0.3
+  image: docker:25.0.3@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   parallel:
     matrix:
       - PYTHON_VERSION:
@@ -31,7 +31,7 @@ dev-container-publish:
         --tag ${CI_REGISTRY_IMAGE}/dev:py${PYTHON_VERSION} \
         --target dev
   services:
-    - docker:25.0.3-dind
+    - docker:25.0.3-dind@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   stage: build
   variables:
     DOCKER_TLS_CERTDIR: /certs

diff --git a/.gitlab/workflows/release.yml b/.gitlab/workflows/release.yml
@@ -12,7 +12,7 @@ pages-build:
     - make release-notes > release-notes.md
   stage: release
 release-publish:
-  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0
+  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0@sha256:5a71acbadc47c1971100f5246b09f88ba09e84ebe7769e425475dce85245a2bf
   needs:
     - pages-build
   release:
@@ -24,7 +24,7 @@ release-publish:
     - echo "Running the release job."
   stage: release
 container-publish:
-  image: docker:25.0.3
+  image: docker:25.0.3@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   needs:
     - release-publish
   parallel:
@@ -65,7 +65,7 @@ container-publish:
         --tag ${CI_REGISTRY_IMAGE}:py${PYTHON_VERSION}-${CI_COMMIT_TAG} \
         --target prod
   services:
-    - docker:25.0.3-dind
+    - docker:25.0.3-dind@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   stage: release
   variables:
     DOCKER_TLS_CERTDIR: /certs

diff --git a/.gitlab/workflows/renovate.yml b/.gitlab/workflows/renovate.yml
@@ -3,7 +3,7 @@ renovate:
     key: ${CI_COMMIT_REF_SLUG}-renovate
     paths:
       - renovate/cache/renovate/repository/
-  image: renovate/renovate:37.202.2
+  image: renovate/renovate:37.202.2@sha256:6b5508487d42dcd36f95ff1139958f3b755bc8ff77b805b86eb1c59db943ef2f
   rules:
     - if: $CI_PIPELINE_SOURCE == "schedule" && $RENOVATE_TOKEN != null
   script: renovate $RENOVATE_EXTRA_FLAG

diff --git a/... or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml b/... or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/commitlint.yml
@@ -1,6 +1,6 @@
 commitlint:
   image:
-    name: commitlint/commitlint:18.6.2
+    name: commitlint/commitlint:18.6.2@sha256:d82e66abdeda7fb4584c3206ddcf9cc4c6c9cb67e433030de0904fed3dab662a
     entrypoint: [""]
   interruptible: true
   rules:

diff --git a/..._host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja b/..._host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/devcontainer.yml.jinja
@@ -1,6 +1,6 @@
 [% from pathjoin("includes", "version_compare.jinja") import version_between -%]
 dev-container-publish:
-  image: docker:25.0.3
+  image: docker:25.0.3@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   parallel:
     matrix:
       - PYTHON_VERSION:
@@ -42,7 +42,7 @@ dev-container-publish:
         --tag ${CI_REGISTRY_IMAGE}/dev:py${PYTHON_VERSION} \
         --target dev
   services:
-    - docker:25.0.3-dind
+    - docker:25.0.3-dind@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   stage: build
   variables:
     DOCKER_TLS_CERTDIR: /certs

diff --git a/... repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja b/... repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/release.yml.jinja
@@ -13,7 +13,7 @@ pages-build:
     - make release-notes > release-notes.md
   stage: release
 release-publish:
-  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0
+  image: registry.gitlab.com/gitlab-org/release-cli:v0.16.0@sha256:5a71acbadc47c1971100f5246b09f88ba09e84ebe7769e425475dce85245a2bf
   needs:
     - pages-build
   release:
@@ -25,7 +25,7 @@ release-publish:
     - echo "Running the release job."
   stage: release
 container-publish:
-  image: docker:25.0.3
+  image: docker:25.0.3@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   needs:
     - release-publish
   parallel:
@@ -76,7 +76,7 @@ container-publish:
         --tag ${CI_REGISTRY_IMAGE}:py${PYTHON_VERSION}-${CI_COMMIT_TAG} \
         --target prod
   services:
-    - docker:25.0.3-dind
+    - docker:25.0.3-dind@sha256:0d70c541ee98e66b8f7ece8c0e9f7910732466e337a9087c2ac2868ef0775092
   stage: release
   variables:
     DOCKER_TLS_CERTDIR: /certs

diff --git a/...m' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/renovate.yml b/...m' or repo_host_type == 'gitlab-self-managed' %].gitlab[% endif %]/workflows/renovate.yml
@@ -3,7 +3,7 @@ renovate:
     key: ${CI_COMMIT_REF_SLUG}-renovate
     paths:
       - renovate/cache/renovate/repository/
-  image: renovate/renovate:37.202.2
+  image: renovate/renovate:37.202.2@sha256:6b5508487d42dcd36f95ff1139958f3b755bc8ff77b805b86eb1c59db943ef2f
   rules:
     - if: $CI_PIPELINE_SOURCE == "schedule" && $RENOVATE_TOKEN != null
   script: renovate $RENOVATE_EXTRA_FLAG