From c4299e6b233753eb75b024fe733dfb5299c57141 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 30 Oct 2026 02:04:51 +0000 Subject: [PATCH] Pin dependencies --- .../Release-renovate-1793325890624.yaml | 15 +++++++++++++++ .gitea/workflows/release/build-image.yaml | 2 +- .../workflows/release/update-composer-lock.yaml | 2 +- Dockerfile | 2 +- compose.override.yaml | 2 +- compose.yaml | 4 ++-- docker/logstash/Dockerfile | 2 +- docker/nginx/Dockerfile | 2 +- package.json | 2 +- 9 files changed, 24 insertions(+), 9 deletions(-) create mode 100644 .changes/unreleased/Release-renovate-1793325890624.yaml diff --git a/.changes/unreleased/Release-renovate-1793325890624.yaml b/.changes/unreleased/Release-renovate-1793325890624.yaml new file mode 100644 index 0000000..811dd5b --- /dev/null +++ b/.changes/unreleased/Release-renovate-1793325890624.yaml @@ -0,0 +1,15 @@ +kind: Release +body: | + - axllent/mailpit: -> + - chill/base-image: 8.4-edge -> 8.4-edge + - chill/base-image: 8.4-edge -> 8.4-edge + - docker.elastic.co/logstash/logstash-oss: 8.1.0-amd64 -> 8.1.0-amd64 + - gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image: latest -> latest + - intl-messageformat: ^10.5.11 -> 10.7.18 + - nginx: -> + - redis: -> + - registry.gitlab.com/champs-libres/public/relatorio-tornado/app: latest -> latest + +time: 2026-10-30T02:04:50+00:00 +custom: + Issue: "" diff --git a/.gitea/workflows/release/build-image.yaml b/.gitea/workflows/release/build-image.yaml index 7f99db4..e3b3a01 100644 --- a/.gitea/workflows/release/build-image.yaml +++ b/.gitea/workflows/release/build-image.yaml @@ -19,7 +19,7 @@ jobs: password: ${{ secrets.OVH_REGISTRY_PASSWORD }} - name: Install Dependencies and Build Assets - uses: docker://chill/base-image:8.4-edge + uses: docker://chill/base-image:8.4-edge@sha256:6e29ac29af769e1291246fd0a526820d00364166baaa1890517ff51375a230df env: APP_ENV: prod with: diff --git a/.gitea/workflows/release/update-composer-lock.yaml b/.gitea/workflows/release/update-composer-lock.yaml index c5ea7b8..4156739 100644 --- a/.gitea/workflows/release/update-composer-lock.yaml +++ b/.gitea/workflows/release/update-composer-lock.yaml @@ -19,7 +19,7 @@ jobs: with: cmd: 'cat composer.lock | jq --raw-output ''.packages[] | select ( .name | contains ("chill-project/chill-bundles")) | .version''' - name: run composer update to update composer.lock - uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest + uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest@sha256:d728a939475e465c488056ec8b9c12f31601ea27251aad830499577857b7be94 with: # this is where we set the command to execute args: composer update --no-install diff --git a/Dockerfile b/Dockerfile index 3ce24f8..8d825f3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM chill/base-image:8.4-edge +FROM chill/base-image:8.4-edge@sha256:6e29ac29af769e1291246fd0a526820d00364166baaa1890517ff51375a230df # copy directories with ownership for the unprivileged runtime user COPY --chown=www-data:www-data ./bin /var/www/app/bin/. diff --git a/compose.override.yaml b/compose.override.yaml index 6532ca5..62c727a 100644 --- a/compose.override.yaml +++ b/compose.override.yaml @@ -3,7 +3,7 @@ version: '3' services: ###> symfony/mailer ### mailer: - image: axllent/mailpit + image: axllent/mailpit@sha256:0790692be935ea4420d085694f7985b1f692ca6a8771ab0e0bd8ba75ac180498 ports: - "1025" - "8025" diff --git a/compose.yaml b/compose.yaml index b312fef..b2b0e21 100644 --- a/compose.yaml +++ b/compose.yaml @@ -17,9 +17,9 @@ services: ###> chill-project/chill-bundles ### redis: - image: redis + image: redis@sha256:4764ce37931aac77c0d033680b339b19b4a4a81772204d268947cb851212d0ac relatorio: - image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest + image: registry.gitlab.com/champs-libres/public/relatorio-tornado/app:latest@sha256:2c4aa2f422c389d940adfd760b0856d237023d66cded0aa026b532b29192212e ###< chill-project/chill-bundles ### volumes: diff --git a/docker/logstash/Dockerfile b/docker/logstash/Dockerfile index 67db6cc..8ae607f 100644 --- a/docker/logstash/Dockerfile +++ b/docker/logstash/Dockerfile @@ -1,4 +1,4 @@ -FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64 +FROM docker.elastic.co/logstash/logstash-oss:8.1.0-amd64@sha256:f48c2f7db8b63572fa36db259c98c3894d89fb28d37f9546c26acfc0de525338 RUN \ bin/logstash-plugin install logstash-output-gelf \ diff --git a/docker/nginx/Dockerfile b/docker/nginx/Dockerfile index 7114361..2627ea3 100644 --- a/docker/nginx/Dockerfile +++ b/docker/nginx/Dockerfile @@ -1,4 +1,4 @@ -FROM nginx +FROM nginx@sha256:600f7cd45e27aa13e9304c834ab7c1b0ff39df85ee1dcc5087955455d77bc83b COPY ./public /var/www/app/public diff --git a/package.json b/package.json index 4ab5330..9f5acf3 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "devDependencies": { "@symfony/ux-translator": "file:vendor/symfony/ux-translator/assets", "bootstrap": "5.2.3", - "intl-messageformat": "^10.5.11" + "intl-messageformat": "10.7.18" }, "scripts": { "specs-build": "yaml-merge vendor/chill-project/chill-bundles/src/Bundle/ChillMainBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillPersonBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillCalendarBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillThirdPartyBundle/chill.api.specs.yaml vendor/chill-project/chill-bundles/src/Bundle/ChillDocStoreBundle/chill.api.specs.yaml> templates/api/specs.yaml",