From 20c717070e418ac97b59ad8795ef1ee374482174 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 23 Oct 2026 02:04:33 +0000 Subject: [PATCH] Pin dependencies --- .../Release-renovate-1792721072893.yaml | 15 +++++++++++++++ .gitea/workflows/release/build-image.yaml | 2 +- .../workflows/release/update-composer-lock.yaml | 2 +- Dockerfile | 2 +- compose.override.yaml | 2 +- compose.yaml | 4 ++-- docker/logstash/Dockerfile | 2 +- docker/nginx/Dockerfile | 2 +- package.json | 2 +- 9 files changed, 24 insertions(+), 9 deletions(-) create mode 100644 .changes/unreleased/Release-renovate-1792721072893.yaml diff --git a/.changes/unreleased/Release-renovate-1792721072893.yaml b/.changes/unreleased/Release-renovate-1792721072893.yaml new file mode 100644 index 0000000..efb15a3 --- /dev/null +++ b/.changes/unreleased/Release-renovate-1792721072893.yaml @@ -0,0 +1,15 @@ +kind: Release +body: | + - axllent/mailpit: -> + - chill/base-image: 8.4-edge -> 8.4-edge + - chill/base-image: 8.4-edge -> 8.4-edge + - docker.elastic.co/logstash/logstash-oss: 8.1.0-amd64 -> 8.1.0-amd64 + - gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image: latest -> latest + - intl-messageformat: ^10.5.11 -> 10.7.18 + - nginx: -> + - redis: -> + - registry.gitlab.com/champs-libres/public/relatorio-tornado/app: latest -> latest + +time: 2026-10-23T02:04:32+00:00 +custom: + Issue: "" diff --git a/.gitea/workflows/release/build-image.yaml b/.gitea/workflows/release/build-image.yaml index 7f99db4..ab69164 100644 --- a/.gitea/workflows/release/build-image.yaml +++ b/.gitea/workflows/release/build-image.yaml @@ -19,7 +19,7 @@ jobs: password: ${{ secrets.OVH_REGISTRY_PASSWORD }} - name: Install Dependencies and Build Assets - uses: docker://chill/base-image:8.4-edge + uses: docker://chill/base-image:8.4-edge@sha256:56b487a0e9aab7638894351104afbb3e6cd0e7b94bddd7d76cdb3ce66b89fea9 env: APP_ENV: prod with: diff --git a/.gitea/workflows/release/update-composer-lock.yaml b/.gitea/workflows/release/update-composer-lock.yaml index c5ea7b8..4156739 100644 --- a/.gitea/workflows/release/update-composer-lock.yaml +++ b/.gitea/workflows/release/update-composer-lock.yaml @@ -19,7 +19,7 @@ jobs: with: cmd: 'cat composer.lock | jq --raw-output ''.packages[] | select ( .name | contains ("chill-project/chill-bundles")) | .version''' - name: run composer update to update composer.lock - uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest + uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest@sha256:d728a939475e465c488056ec8b9c12f31601ea27251aad830499577857b7be94 with: # this is where we set the command to execute args: composer update --no-install diff --git a/Dockerfile b/Dockerfile index be4df2d..d0a3a5d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM chill/base-image:8.4-edge +FROM chill/base-image:8.4-edge@sha256:56b487a0e9aab7638894351104afbb3e6cd0e7b94bddd7d76cdb3ce66b89fea9 # copy directories diff --git a/compose.override.yaml b/compose.override.yaml index 6532ca5..62c727a 100644 --- a/compose.override.yaml +++ b/compose.override.yaml @@ -3,7 +3,7 @@ version: '3' services: ###> symfony/mailer ### mailer: - image: axllent/mailpit + image: axllent/mailpit@sha256:0790692be935ea4420d085694f7985b1f692ca6a8771ab0e0bd8ba75ac180498 ports: - "1025" - "8025" diff --git a/compose.yaml b/compose.yaml index b312fef..21d948e 100644 --- a/compose.yaml +++ b/compose.yaml @@ -17,9 +17,9 @@ services: ###> chill-project/chill-bundles ### redis: - image: redis + image: redis@sha256:97ec88159e6d7cfb5ddef9015386087d58a912de80112f06ebdfa78fa5989901 relatorio: - image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest + image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest@sha256:2c4aa2f422c389d940adfd760b0856d237023d66cded0aa026b532b29192212e ###< chill-project/chill-bundles ### volumes: diff --git a/docker/logstash/Dockerfile b/docker/logstash/Dockerfile index 67db6cc..8ae607f 100644 --- a/docker/logstash/Dockerfile +++ b/docker/logstash/Dockerfile @@ -1,4 +1,4 @@ -FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64 +FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64@sha256:f48c2f7db8b63572fa36db259c98c3894d89fb28d37f9546c26acfc0de525338 RUN \ bin/logstash-plugin install logstash-output-gelf \ diff --git a/docker/nginx/Dockerfile b/docker/nginx/Dockerfile index 7114361..558b1ed 100644 --- a/docker/nginx/Dockerfile +++ b/docker/nginx/Dockerfile @@ -1,4 +1,4 @@ -FROM nginx +FROM nginx@sha256:4c41e2d0a3a55b325ed572cd0200bdb72af1433c3daa2bca6ef8eea68ce504a2 COPY ./public /var/www/app/public diff --git a/package.json b/package.json index 4ab5330..9f5acf3 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "devDependencies": { "@symfony/ux-translator": "file:vendor/symfony/ux-translator/assets", "bootstrap": "5.2.3", - "intl-messageformat": "^10.5.11" + "intl-messageformat": "10.7.18" }, "scripts": { "specs-build": "yaml-merge vendor/chill-project/chill-bundles/src/Bundle/ChillMainBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillPersonBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillCalendarBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillThirdPartyBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillDocStoreBundle/chill.api.specs.yaml> templates/api/specs.yaml",