From 725ef9000b3ec366915458bc43c5bc905d04b1b2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 14 Nov 2025 17:07:53 +0100 Subject: [PATCH] chore(deps): pin dependencies (#21) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pinDigest | -> `08c6903` | | alpine | final | pinDigest | -> `4b7ce07` | | [docker/build-push-action](https://github.com/docker/build-push-action) | action | pinDigest | -> `2634353` | | [docker/login-action](https://github.com/docker/login-action) | action | pinDigest | -> `5e57cd1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | pinDigest | -> `e468171` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | action | pinDigest | -> `de90cc6` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://gitea.t000-n.de/t.behrendt/backupsidecar/pulls/21 Reviewed-by: t.behrendt Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- .gitea/workflows/cd.yaml | 18 +++++++++--------- .gitea/workflows/ci.yaml | 8 ++++---- Dockerfile | 2 +- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml index a3fa395..3d437a7 100644 --- a/.gitea/workflows/cd.yaml +++ b/.gitea/workflows/cd.yaml @@ -16,11 +16,11 @@ jobs: changes: ${{ steps.filter.outputs.code }} steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Get changed files id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3 with: filters: | code: @@ -42,9 +42,9 @@ jobs: - ubuntu-latest - linux_${{ matrix.arch }} steps: - - uses: actions/checkout@v5 - - uses: docker/setup-buildx-action@v3 - - uses: docker/login-action@v3 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3 + - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3 with: registry: ${{ env.DOCKER_REGISTRY }} username: ${{ secrets.REGISTRY_USER }} @@ -53,7 +53,7 @@ jobs: run: | echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}' | tr '[:upper:]' '[:lower:]') >> $GITHUB_OUTPUT echo REPO_VERSION=$(git describe --tags --always | sed 's/^v//') >> $GITHUB_OUTPUT - - uses: docker/build-push-action@v6 + - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6 with: context: . file: ./Dockerfile @@ -72,7 +72,7 @@ jobs: outputs: tag: ${{ steps.tag.outputs.new-tag }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 with: fetch-depth: 0 - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.0.2 @@ -93,12 +93,12 @@ jobs: - create_tag runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - id: meta run: | echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}' | tr '[:upper:]' '[:lower:]') >> $GITHUB_OUTPUT echo REPO_VERSION=$(git describe --tags --always | sed 's/^v//') >> $GITHUB_OUTPUT - - uses: docker/login-action@v3 + - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3 with: registry: ${{ env.DOCKER_REGISTRY }} username: ${{ secrets.REGISTRY_USER }} diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index 0959cbb..0919a75 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -10,10 +10,10 @@ jobs: - ubuntu-latest - linux_amd64 steps: - - uses: actions/checkout@v5 - - uses: docker/setup-buildx-action@v3 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3 - name: Build image - uses: docker/build-push-action@v6 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6 with: context: . file: ./Dockerfile @@ -27,7 +27,7 @@ jobs: name: Check syntax runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Check syntax run: | bash -n src/backup.sh diff --git a/Dockerfile b/Dockerfile index 6cad040..876cc69 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.22 +FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 RUN apk update && apk add --no-cache \ bash \