Pin dependencies

Author: renovate[bot]

.circleci/config.yml

@@ -64,10 +64,10 @@ common:
 executors:
   cif_executor:
     docker:
-      - image: cimg/openjdk:11.0.16-browsers
+      - image: cimg/openjdk:11.0.16-browsers@sha256:d41abcf26cb4714c8c451f87560ae3dc88767c84e0c03754286df1f301c00a51
   cif_executor_java8:
     docker:
-      - image: cimg/openjdk:8.0-browsers
+      - image: cimg/openjdk:8.0-browsers@sha256:0bea850c1759e7668115006896685d6063345d0ad4f389961fbf887f8ca50859
   test_executor_cloudready:
     docker:
       - image: docker-adobe-cif-release.dr-uw2.adobeitc.com/circleci-qp:6.4.6-openjdk11
@@ -143,7 +143,7 @@ jobs:
 
   karma:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - browser-tools/install-browser-tools
@@ -168,7 +168,7 @@ jobs:
 
   jest:
     docker:
-      - image: cimg/node:16.20.0-browsers
+      - image: cimg/node:16.20.0-browsers@sha256:12230011c5d81ca32d79fe92bc5212c4f05c10eb5ac3a15c467e6a40750d9889
     steps:
       - checkout
       - run:
@@ -191,7 +191,7 @@ jobs:
 
   jest-extension-product-recs:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - run:
@@ -225,7 +225,7 @@ jobs:
 
   jest-extension-experience-platform-connector:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - run:

.devcontainer/devcontainer.json

@@ -1,6 +1,6 @@
 {
 	"name": "Java",
-	"image": "mcr.microsoft.com/devcontainers/java:11",
+	"image": "mcr.microsoft.com/devcontainers/java:11@sha256:d59d8d4fbbd05f60aeb9ddfe5883e3315c432b5de56d3664bd3b3341ff1aad6f",
 	"features": {
 		"ghcr.io/devcontainers/features/java:1": {
 			"version": "none",