diff --git a/.changes/unreleased/Release-renovate-1792634596127.yaml b/.changes/unreleased/Release-renovate-1792634596127.yaml
new file mode 100644
index 0000000..886e0a0
--- /dev/null
+++ b/.changes/unreleased/Release-renovate-1792634596127.yaml
@@ -0,0 +1,15 @@
+kind: Release
+body: |
+  - axllent/mailpit:  ->  
+  - chill/base-image: 8.4-edge ->  8.4-edge
+  - chill/base-image: 8.4-edge ->  8.4-edge
+  - docker.elastic.co/logstash/logstash-oss: 8.1.0-amd64 ->  8.1.0-amd64
+  - gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image: latest ->  latest
+  - intl-messageformat: ^10.5.11 ->  10.7.18
+  - nginx:  ->  
+  - redis:  ->  
+  - registry.gitlab.com/champs-libres/public/relatorio-tornado/app: latest ->  latest
+
+time: 2026-10-22T02:03:16+00:00
+custom:
+  Issue: ""
diff --git a/.gitea/workflows/release/build-image.yaml b/.gitea/workflows/release/build-image.yaml
index 7f99db4..ef5ae4b 100644
--- a/.gitea/workflows/release/build-image.yaml
+++ b/.gitea/workflows/release/build-image.yaml
@@ -19,7 +19,7 @@ jobs:
           password: ${{ secrets.OVH_REGISTRY_PASSWORD }}
 
       - name: Install Dependencies and Build Assets
-        uses: docker://chill/base-image:8.4-edge
+        uses: docker://chill/base-image:8.4-edge@sha256:dc18312d159e2b1dabe1dcbc62fe694bec7031e7658bb78ba153e4eb7913fdd7
         env:
           APP_ENV: prod
         with:
diff --git a/.gitea/workflows/release/update-composer-lock.yaml b/.gitea/workflows/release/update-composer-lock.yaml
index c5ea7b8..4156739 100644
--- a/.gitea/workflows/release/update-composer-lock.yaml
+++ b/.gitea/workflows/release/update-composer-lock.yaml
@@ -19,7 +19,7 @@ jobs:
               with:
                 cmd: 'cat composer.lock | jq --raw-output ''.packages[] | select ( .name | contains ("chill-project/chill-bundles")) | .version'''
             - name: run composer update to update composer.lock
-              uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest
+              uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest@sha256:d728a939475e465c488056ec8b9c12f31601ea27251aad830499577857b7be94
               with:
                   # this is where we set the command to execute
                   args: composer update --no-install
diff --git a/Dockerfile b/Dockerfile
index be4df2d..f60c84a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM chill/base-image:8.4-edge
+FROM chill/base-image:8.4-edge@sha256:dc18312d159e2b1dabe1dcbc62fe694bec7031e7658bb78ba153e4eb7913fdd7
 
 # copy directories
 
diff --git a/compose.override.yaml b/compose.override.yaml
index 6532ca5..e477841 100644
--- a/compose.override.yaml
+++ b/compose.override.yaml
@@ -3,7 +3,7 @@ version: '3'
 services:
 ###> symfony/mailer ###
   mailer:
-    image: axllent/mailpit
+    image: axllent/mailpit@sha256:23fe39e81bde596a918000b3135c0f85dc8bb4c9ea6be274b051143f3e300387
     ports:
       - "1025"
       - "8025"
diff --git a/compose.yaml b/compose.yaml
index b312fef..c204e9e 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -17,9 +17,9 @@ services:
 
 ###> chill-project/chill-bundles ###
   redis:
-      image: redis
+      image: redis@sha256:5c02d7c0f8d75af45958c0294a8004f2e14b42df98a1103e3a669aa7ec787be6
   relatorio:
-      image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest
+      image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest@sha256:2c4aa2f422c389d940adfd760b0856d237023d66cded0aa026b532b29192212e
 ###< chill-project/chill-bundles ###
 
 volumes:
diff --git a/docker/logstash/Dockerfile b/docker/logstash/Dockerfile
index 67db6cc..8ae607f 100644
--- a/docker/logstash/Dockerfile
+++ b/docker/logstash/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64
+FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64@sha256:f48c2f7db8b63572fa36db259c98c3894d89fb28d37f9546c26acfc0de525338
 
 RUN \
   bin/logstash-plugin install logstash-output-gelf \
diff --git a/docker/nginx/Dockerfile b/docker/nginx/Dockerfile
index 7114361..38aff8c 100644
--- a/docker/nginx/Dockerfile
+++ b/docker/nginx/Dockerfile
@@ -1,4 +1,4 @@
-FROM nginx
+FROM nginx@sha256:7be37bf763b492b3f5af2aa0f280971c601c3d6cd219f2f3a05d075f76bf095f
 
 COPY ./public /var/www/app/public
 
diff --git a/package.json b/package.json
index 4ab5330..9f5acf3 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,7 @@
   "devDependencies": {
     "@symfony/ux-translator": "file:vendor/symfony/ux-translator/assets",
     "bootstrap": "5.2.3",
-    "intl-messageformat": "^10.5.11"
+    "intl-messageformat": "10.7.18"
   },
   "scripts": {
     "specs-build": "yaml-merge vendor/chill-project/chill-bundles/src/Bundle/ChillMainBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillPersonBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillCalendarBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillThirdPartyBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillDocStoreBundle/chill.api.specs.yaml> templates/api/specs.yaml",