chore(deps): pin dependencies

QuivrHQ · Oct 7, 2024 · 3d37a40 · 3d37a40
1 parent 25057f9
commit 3d37a40
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 9 deletions.
diff --git a/backend/api/Dockerfile b/backend/api/Dockerfile
@@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626
 
 ARG DEV_MODE
 ENV DEV_MODE=$DEV_MODE

diff --git a/backend/api/Dockerfile.dev b/backend/api/Dockerfile.dev
@@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626
 
 ARG DEV_MODE
 ENV DEV_MODE=$DEV_MODE

diff --git a/backend/core/Dockerfile.test b/backend/core/Dockerfile.test
@@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626
 
 # Install GEOS library, Rust, and other dependencies, then clean up
 RUN apt-get clean && apt-get update && apt-get install -y \

diff --git a/backend/core/MegaParse/.github/workflows/release-please.yml b/backend/core/MegaParse/.github/workflows/release-please.yml
@@ -16,18 +16,18 @@ jobs:
       release_created: ${{ steps.release.outputs.release_created }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0 # Fetch all history for tags and releases
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: '3.11'
 
       - name: Run release-please
         id: release
-        uses: google-github-actions/release-please-action@v4
+        uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4
         with:
           token: ${{ secrets.RELEASE_PLEASE_TOKEN }}
 
@@ -37,9 +37,9 @@ jobs:
     needs: release-please
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: Install Rye
-        uses: eifinger/setup-rye@v2
+        uses: eifinger/setup-rye@787604a465b1696ad17eedf2f8101df9fc555c94 # v2
         with:
           enable-cache: true
       - name: Rye Sync

diff --git a/backend/core/MegaParse/Dockerfile b/backend/core/MegaParse/Dockerfile
@@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626
 
 # Install GEOS library, Rust, and other dependencies, then clean up
 RUN apt-get clean && apt-get update && apt-get install -y \