Pin dependencies (#7)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | pinDigest |  → `de0fac2` |
| [actions/setup-java](https://github.com/actions/setup-java) | action | pinDigest |  → `be666c2` |
| eclipse-temurin | final | pinDigest |  → `30d9f87` |
| [https://gitea.seeseepuff.be/actions/watchtower](https://gitea.seeseepuff.be/actions/watchtower) | action | pinDigest |  → `3c31a0d` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuNiIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC42IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->

Reviewed-on: #7
Co-authored-by: Renovate Bot <sebastiaan.de.schaetzen+renovate@gmail.com>
Co-committed-by: Renovate Bot <sebastiaan.de.schaetzen+renovate@gmail.com>

.gitea/workflows/build.yml

@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'temurin'
           java-version: '25'

.gitea/workflows/deploy.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -35,4 +35,4 @@ jobs:
         run: docker push gitea.seeseepuff.be/seeseemelk/webgit:latest
 
       - name: Trigger Watchtower
-        uses: https://gitea.seeseepuff.be/actions/watchtower@v1
+        uses: https://gitea.seeseepuff.be/actions/watchtower@3c31a0da833fadae874b66f14d5f61980dc4f07b # v1

Dockerfile

@@ -1,4 +1,4 @@
-FROM eclipse-temurin:25-alpine
+FROM eclipse-temurin:25-alpine@sha256:30d9f87d702c2c1c601ed0d31e0c88ea1ea474ee7676cda7b7a59e759181c4dd
 WORKDIR /app
 ADD ./build/libs/webgit-0.0.1-SNAPSHOT.jar /app/webgit.jar
 ENTRYPOINT ["java", "-jar", "webgit.jar"]