From df24cc14d09eb26533e1f9005fec2b0f1cd22001 Mon Sep 17 00:00:00 2001
From: Renovate Bot <sebastiaan.de.schaetzen+renovate@gmail.com>
Date: Sun, 3 May 2026 18:57:15 +0000
Subject: [PATCH] Pin dependencies

---
 .gitea/workflows/build.yml  | 4 ++--
 .gitea/workflows/deploy.yml | 4 ++--
 Dockerfile                  | 2 +-
 docker-compose.yml          | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 0d43737..74c2b1b 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '21'
diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 6ec2e14..e2fb65c 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '21'
diff --git a/Dockerfile b/Dockerfile
index 0cdcd2e..91849db 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM eclipse-temurin:25-alpine
+FROM eclipse-temurin:25-alpine@sha256:30d9f87d702c2c1c601ed0d31e0c88ea1ea474ee7676cda7b7a59e759181c4dd
 WORKDIR /app
 ADD ./build/libs/pcinv-0.0.1-SNAPSHOT.jar /app/pcinv.jar
 ENTRYPOINT ["java", "-jar", "pcinv.jar"]
diff --git a/docker-compose.yml b/docker-compose.yml
index ed02886..19b896f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   database:
-    image: postgres:latest
+    image: postgres:latest@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
     environment:
       POSTGRES_USER: pcinv
       POSTGRES_PASSWORD: pcinv