From 962a6e852be2512d1baed8f9b2fe1ac2d4d60f13 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 8 Sep 2024 10:24:01 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .../dependency-updates-helper/Dockerfile | 48 +++++++++---------- docker/ansible/Dockerfile | 2 +- docker/arduino-cli/Dockerfile | 2 +- 3 files changed, 26 insertions(+), 26 deletions(-) diff --git a/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile b/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile index d799531d6..db8ef5d25 100644 --- a/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile +++ b/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile @@ -3,47 +3,47 @@ # We then fetch these identifiers for use in templates. # backup -FROM ngosang/restic-exporter:1.6.0 AS restic-exporter +FROM ngosang/restic-exporter:1.6.0@sha256:55cb0e496fc1f6e95f5b68e1d3cf8fa52a91dadb608e4b8093946ffcf2bbe5da AS restic-exporter # frigate -FROM ghcr.io/blakeblackshear/frigate:0.14.1 AS frigate +FROM ghcr.io/blakeblackshear/frigate:0.14.1@sha256:22e3d0b486df52c3d669682254c2b1bf4205fa6ad8bd8f8c9f7fe76b1517005d AS frigate # home-assistant -FROM ghcr.io/home-assistant/home-assistant:2024.6.4 AS home-assistant +FROM ghcr.io/home-assistant/home-assistant:2024.6.4@sha256:17d159928122e6f374bd39b0e75904522bc7d7c2a64e88b248948734e4c4d444 AS home-assistant # media-stack -FROM jellyfin/jellyfin:10.9.10.20240825-063525 AS jellyfin -FROM fallenbagel/jellyseerr:1.9.2 AS jellyseerr -FROM ghcr.io/flaresolverr/flaresolverr:v3.3.21 AS flaresolverr -FROM lscr.io/linuxserver/lidarr:2.3.3 AS lidarr -FROM lscr.io/linuxserver/prowlarr:1.23.1 AS prowlarr -FROM lscr.io/linuxserver/radarr:5.9.1 AS radarr -FROM lscr.io/linuxserver/readarr:0.4.0-nightly AS readarr -FROM lscr.io/linuxserver/sonarr:4.0.9 AS sonarr +FROM jellyfin/jellyfin:10.9.10.20240825-063525@sha256:79fb3d73a3e995a3960b41d7d1e16ca6a06fb0b9938404ba38c0072a7e5f358c AS jellyfin +FROM fallenbagel/jellyseerr:1.9.2@sha256:8f708df0ce3f202056bde5d7bff625eb59efe38f4ee47bdddc7560b6e4a5a214 AS jellyseerr +FROM ghcr.io/flaresolverr/flaresolverr:v3.3.21@sha256:f104ee51e5124d83cf3be9b37480649355d223f7d8f9e453d0d5ef06c6e3b31b AS flaresolverr +FROM lscr.io/linuxserver/lidarr:2.3.3@sha256:32ddd032d57d7e996052b0fe68c651e88f87909eaab26935dc0160ea468a936e AS lidarr +FROM lscr.io/linuxserver/prowlarr:1.23.1@sha256:9dd32e2270d174b07bd33a1f54e2b79e03ad944df62ed93efa08f4a381adc9a1 AS prowlarr +FROM lscr.io/linuxserver/radarr:5.9.1@sha256:47acec85a0d92d107096088aebe83d1d0a434def34e5bac317fff18ca28741ae AS radarr +FROM lscr.io/linuxserver/readarr:0.4.0-nightly@sha256:4ecd4d5c59f23d57d91af66ce32b0b7fe3651ec37db64319469a13f53a1f5f84 AS readarr +FROM lscr.io/linuxserver/sonarr:4.0.9@sha256:138998077a802c18b76c26636301fcd5517b7bfaf75db025d457199176078a12 AS sonarr # monitoring -FROM gcr.io/cadvisor/cadvisor:v0.49.1 AS cadvisor -FROM ghcr.io/druggeri/nut_exporter:3.1.1 AS nut-exporter -FROM prom/blackbox-exporter:v0.25.0 AS prometheus-blackbox-exporter -FROM prom/prometheus:v2.54.1 AS prometheus -FROM quay.io/prometheus/node-exporter:v1.8.2 AS prometheus-node-exporter +FROM gcr.io/cadvisor/cadvisor:v0.49.1@sha256:3cde6faf0791ebf7b41d6f8ae7145466fed712ea6f252c935294d2608b1af388 AS cadvisor +FROM ghcr.io/druggeri/nut_exporter:3.1.1@sha256:0d9a0a00554081876178369ab9d46717e002fcf550b18dcd85f98c315438b524 AS nut-exporter +FROM prom/blackbox-exporter:v0.25.0@sha256:b04a9fef4fa086a02fc7fcd8dcdbc4b7b35cc30cdee860fdc6a19dd8b208d63e AS prometheus-blackbox-exporter +FROM prom/prometheus:v2.54.1@sha256:f6639335d34a77d9d9db382b92eeb7fc00934be8eae81dbc03b31cfe90411a94 AS prometheus +FROM quay.io/prometheus/node-exporter:v1.8.2@sha256:4032c6d5bfd752342c3e631c2f1de93ba6b86c41db6b167b9a35372c139e7706 AS prometheus-node-exporter # monitoring-backend -FROM grafana/grafana-oss:11.2.0 AS grafana +FROM grafana/grafana-oss:11.2.0@sha256:408afb9726de5122b00a2576763a8a57a3c86d5b0eff5305bc994ceb3eb96c3f AS grafana # mosquitto -FROM eclipse-mosquitto:2.0.18-openssl AS mosquitto +FROM eclipse-mosquitto:2.0.18-openssl@sha256:992792574d67e5fe15264e595d6a808ff0afd324749cd13304416ae012aa4ba7 AS mosquitto # network-stack -FROM klutchell/unbound:1.21.0 AS unbound -FROM coredns/coredns:1.11.3 AS coredns -FROM traefik:3.0.4 AS traefik +FROM klutchell/unbound:1.21.0@sha256:41a37ebbfc522155cc68c21b783f7b30f041438ae1c3c1ab011cd2e73c1624c5 AS unbound +FROM coredns/coredns:1.11.3@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e AS coredns +FROM traefik:3.0.4@sha256:a208c74fd80a566d4ea376053bff73d31616d7af3f1465a7747b8b89ee34d97e AS traefik # syncthing -FROM syncthing/syncthing:1.27.12 AS syncthing +FROM syncthing/syncthing:1.27.12@sha256:5fb5438b300a430f0636b60924939defb84f965b15ad7ae16acf5a2ac9c9e5c3 AS syncthing # torrent -FROM linuxserver/qbittorrent:4.6.6 AS qbittorrent +FROM linuxserver/qbittorrent:4.6.6@sha256:5c89a1cd3132981c51fc5ba0f47ecae9b10253029cf8decaa8ae14236fb11e32 AS qbittorrent # zigbee2mqtt -FROM koenkk/zigbee2mqtt:1.40.1 AS zigbee2mqtt +FROM koenkk/zigbee2mqtt:1.40.1@sha256:8127ec2b6e5370eb83033e9cd7250a72bc418b4ead722eadb17c664bebd8b829 AS zigbee2mqtt diff --git a/docker/ansible/Dockerfile b/docker/ansible/Dockerfile index 08d22eeb6..771c54486 100644 --- a/docker/ansible/Dockerfile +++ b/docker/ansible/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.13.0rc1-bookworm AS ansible +FROM python:3.13.0rc1-bookworm@sha256:22006922ed6d76d176dbd2bfb86a0fa7e1cb0c7d53bd8c3bf6f17bcbe56c34c5 AS ansible ENV PYTHONFAULTHANDLER=1 \ PYTHONHASHSEED=random \ diff --git a/docker/arduino-cli/Dockerfile b/docker/arduino-cli/Dockerfile index efe28d772..2e256457e 100644 --- a/docker/arduino-cli/Dockerfile +++ b/docker/arduino-cli/Dockerfile @@ -1,4 +1,4 @@ -FROM debian:bullseye +FROM debian:bullseye@sha256:8ccc486c29a3ad02ad5af7f1156e2152dff3ba5634eec9be375269ef123457d8 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]