From c4b0ee69dd3f5fdac45371df95b4fd492cd2bd02 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 14 Sep 2024 02:41:04 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .../dependency-updates-helper/Dockerfile | 48 +++++++++---------- docker/ansible/Dockerfile | 2 +- docker/arduino-cli/Dockerfile | 2 +- 3 files changed, 26 insertions(+), 26 deletions(-) diff --git a/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile b/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile index 6128acca8..715bd0311 100644 --- a/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile +++ b/config/ansible/roles/ferrarimarco_home_lab_node/files/config/dependency-updates-helper/Dockerfile @@ -3,47 +3,47 @@ # We then fetch these identifiers for use in templates. # backup -FROM ngosang/restic-exporter:1.6.0 AS restic-exporter +FROM ngosang/restic-exporter:1.6.0@sha256:55cb0e496fc1f6e95f5b68e1d3cf8fa52a91dadb608e4b8093946ffcf2bbe5da AS restic-exporter # frigate -FROM ghcr.io/blakeblackshear/frigate:0.14.1 AS frigate +FROM ghcr.io/blakeblackshear/frigate:0.14.1@sha256:22e3d0b486df52c3d669682254c2b1bf4205fa6ad8bd8f8c9f7fe76b1517005d AS frigate # home-assistant -FROM ghcr.io/home-assistant/home-assistant:2024.9.1 AS home-assistant +FROM ghcr.io/home-assistant/home-assistant:2024.9.1@sha256:f1a96b632ea6f2b96f882ea17e2ed3660a741d5e45a5278ef0f38abe8e1df6c8 AS home-assistant # media-stack -FROM jellyfin/jellyfin:10.9.10.20240825-063525 AS jellyfin -FROM fallenbagel/jellyseerr:1.9.2 AS jellyseerr -FROM ghcr.io/flaresolverr/flaresolverr:v3.3.21 AS flaresolverr -FROM lscr.io/linuxserver/lidarr:2.5.3 AS lidarr -FROM lscr.io/linuxserver/prowlarr:1.23.1 AS prowlarr -FROM lscr.io/linuxserver/radarr:5.9.1 AS radarr -FROM lscr.io/linuxserver/readarr:0.4.0-nightly AS readarr -FROM lscr.io/linuxserver/sonarr:4.0.9 AS sonarr +FROM jellyfin/jellyfin:10.9.10.20240825-063525@sha256:79fb3d73a3e995a3960b41d7d1e16ca6a06fb0b9938404ba38c0072a7e5f358c AS jellyfin +FROM fallenbagel/jellyseerr:1.9.2@sha256:8f708df0ce3f202056bde5d7bff625eb59efe38f4ee47bdddc7560b6e4a5a214 AS jellyseerr +FROM ghcr.io/flaresolverr/flaresolverr:v3.3.21@sha256:f104ee51e5124d83cf3be9b37480649355d223f7d8f9e453d0d5ef06c6e3b31b AS flaresolverr +FROM lscr.io/linuxserver/lidarr:2.5.3@sha256:1a543b03bbb76a6683bbbe77e4366917f0e7eae67f2e5e6c005dd40344ec7008 AS lidarr +FROM lscr.io/linuxserver/prowlarr:1.23.1@sha256:c1318191d5211ac7462c754422eafe350ed0de61c4160065a420896068ec1ccc AS prowlarr +FROM lscr.io/linuxserver/radarr:5.9.1@sha256:5ab12592e768d04d94bc04877bee194f372ea3946abc6de689311f4d8559ee2f AS radarr +FROM lscr.io/linuxserver/readarr:0.4.0-nightly@sha256:1537a90b34bc31ee100ae261a22898979c4c796eaa43196ee0fc23ffa1625094 AS readarr +FROM lscr.io/linuxserver/sonarr:4.0.9@sha256:28cc44346fc87805b52a4376a89edc12cf082a5530cffee800a6c05dee482734 AS sonarr # monitoring -FROM gcr.io/cadvisor/cadvisor:v0.50.0 AS cadvisor -FROM ghcr.io/druggeri/nut_exporter:3.1.1 AS nut-exporter -FROM prom/blackbox-exporter:v0.25.0 AS prometheus-blackbox-exporter -FROM prom/prometheus:v2.54.1 AS prometheus -FROM quay.io/prometheus/node-exporter:v1.8.2 AS prometheus-node-exporter +FROM gcr.io/cadvisor/cadvisor:v0.50.0@sha256:2f3ea45c7ee3d7a0ce9f9d55a5053bd12285b02aca307ce9657af8e3ea7f6761 AS cadvisor +FROM ghcr.io/druggeri/nut_exporter:3.1.1@sha256:0d9a0a00554081876178369ab9d46717e002fcf550b18dcd85f98c315438b524 AS nut-exporter +FROM prom/blackbox-exporter:v0.25.0@sha256:b04a9fef4fa086a02fc7fcd8dcdbc4b7b35cc30cdee860fdc6a19dd8b208d63e AS prometheus-blackbox-exporter +FROM prom/prometheus:v2.54.1@sha256:f6639335d34a77d9d9db382b92eeb7fc00934be8eae81dbc03b31cfe90411a94 AS prometheus +FROM quay.io/prometheus/node-exporter:v1.8.2@sha256:4032c6d5bfd752342c3e631c2f1de93ba6b86c41db6b167b9a35372c139e7706 AS prometheus-node-exporter # monitoring-backend -FROM grafana/grafana-oss:11.2.0 AS grafana +FROM grafana/grafana-oss:11.2.0@sha256:408afb9726de5122b00a2576763a8a57a3c86d5b0eff5305bc994ceb3eb96c3f AS grafana # mosquitto -FROM eclipse-mosquitto:2.0.18-openssl AS mosquitto +FROM eclipse-mosquitto:2.0.18-openssl@sha256:992792574d67e5fe15264e595d6a808ff0afd324749cd13304416ae012aa4ba7 AS mosquitto # network-stack -FROM klutchell/unbound:1.21.0 AS unbound -FROM coredns/coredns:1.11.3 AS coredns -FROM traefik:3.1.2 AS traefik +FROM klutchell/unbound:1.21.0@sha256:41a37ebbfc522155cc68c21b783f7b30f041438ae1c3c1ab011cd2e73c1624c5 AS unbound +FROM coredns/coredns:1.11.3@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e AS coredns +FROM traefik:3.1.2@sha256:3f92eba47bd4bfda91d47b72d16fef2d7ae15db61a92b2057cf0cb389f8938f6 AS traefik # syncthing -FROM syncthing/syncthing:1.27.12 AS syncthing +FROM syncthing/syncthing:1.27.12@sha256:5fb5438b300a430f0636b60924939defb84f965b15ad7ae16acf5a2ac9c9e5c3 AS syncthing # torrent -FROM linuxserver/qbittorrent:4.6.6 AS qbittorrent +FROM linuxserver/qbittorrent:4.6.6@sha256:5c89a1cd3132981c51fc5ba0f47ecae9b10253029cf8decaa8ae14236fb11e32 AS qbittorrent # zigbee2mqtt -FROM koenkk/zigbee2mqtt:1.40.1 AS zigbee2mqtt +FROM koenkk/zigbee2mqtt:1.40.1@sha256:8127ec2b6e5370eb83033e9cd7250a72bc418b4ead722eadb17c664bebd8b829 AS zigbee2mqtt diff --git a/docker/ansible/Dockerfile b/docker/ansible/Dockerfile index 08d22eeb6..771c54486 100644 --- a/docker/ansible/Dockerfile +++ b/docker/ansible/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.13.0rc1-bookworm AS ansible +FROM python:3.13.0rc1-bookworm@sha256:22006922ed6d76d176dbd2bfb86a0fa7e1cb0c7d53bd8c3bf6f17bcbe56c34c5 AS ansible ENV PYTHONFAULTHANDLER=1 \ PYTHONHASHSEED=random \ diff --git a/docker/arduino-cli/Dockerfile b/docker/arduino-cli/Dockerfile index efe28d772..2e256457e 100644 --- a/docker/arduino-cli/Dockerfile +++ b/docker/arduino-cli/Dockerfile @@ -1,4 +1,4 @@ -FROM debian:bullseye +FROM debian:bullseye@sha256:8ccc486c29a3ad02ad5af7f1156e2152dff3ba5634eec9be375269ef123457d8 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]