chore(deps): pin dependencies

Author: renovate[bot]

.devcontainer/Dockerfile

@@ -1,12 +1,12 @@
-FROM mcr.microsoft.com/devcontainers/base:2.1.9-bookworm
+FROM mcr.microsoft.com/devcontainers/base:2.1.10-bookworm@sha256:aba0f2e0730af481edf2db5582a80c0ed2591bee78ec177f7fa7a38e8f5e1105
 
 ENV PYTHONUNBUFFERED=True
 ENV UV_LINK_MODE=copy
 
 WORKDIR /opt
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uv  /bin/uv
-COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uvx /bin/uvx
+COPY --from=ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 /uv  /bin/uv
+COPY --from=ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 /uvx /bin/uvx
 COPY ./.py-version ./.python-version
 
 # Install required tools for development

controller/Dockerfile

@@ -39,7 +39,7 @@ RUN  --mount=type=cache,target=/opt/app-root/src/go/pkg/mod,sharing=locked,uid=1
      -ldflags "-X main.version=${GIT_VERSION} -X main.gitCommit=${GIT_COMMIT} -X main.buildDate=${BUILD_DATE}" \
      -o router  cmd/router/main.go
 
-FROM registry.access.redhat.com/ubi9/ubi-micro:9.5
+FROM registry.access.redhat.com/ubi9/ubi-micro:9.8-1779858820@sha256:b498b3ea26111ab4b81d65139f2ebd2ef9a2abb7a4588b7fdcc54889f95e9caa
 WORKDIR /
 COPY --from=builder /opt/app-root/src/manager .
 COPY --from=builder /opt/app-root/src/router  .

controller/Dockerfile.operator

@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=/opt/app-root/src/go/pkg/mod,sharing=locked,uid=10
     -ldflags "-X main.version=${GIT_VERSION} -X main.gitCommit=${GIT_COMMIT} -X main.buildDate=${BUILD_DATE}" \
     -o manager cmd/main.go
 
-FROM registry.access.redhat.com/ubi9/ubi-micro:9.5
+FROM registry.access.redhat.com/ubi9/ubi-micro:9.8-1779858820@sha256:b498b3ea26111ab4b81d65139f2ebd2ef9a2abb7a4588b7fdcc54889f95e9caa
 WORKDIR /
 COPY --from=builder /opt/app-root/src/deploy/operator/manager .
 USER 65532:65532

controller/deploy/microshift-bootc/Containerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/microshift-io/microshift:4.21.0_gbc8e20c07_4.21.0_okd_scos.ec.14
+FROM ghcr.io/microshift-io/microshift:4.21.0_g29f429c21_4.21.0_okd_scos.ec.15@sha256:f8a9d7718a8631d4652505c20f9435556e5132bbf6fc8b17ee96e439ec1816ee
 # Install dependencies for config-svc
 RUN dnf install -y epel-release && \
     dnf install -y python3 iproute python3-flask python3-pip && \

python/.devfile/Containerfile

@@ -1,4 +1,4 @@
-FROM quay.io/devfile/base-developer-image:ubi9-latest
+FROM quay.io/devfile/base-developer-image:ubi9-latest@sha256:c9665e37c2b9367b868954bfc3313b3cd91138e598ac8630903d6a96b0c7c878
 LABEL maintainer="Jumpstarter.dev"
 
 LABEL name="devfile/udi9/jumpstarter"
@@ -8,8 +8,8 @@ LABEL summary="devfile jumpstarter developer image"
 LABEL description="Image with developers tools."
 LABEL io.k8s.display-name="jumpstarter-developer-universal"
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uv  /bin/uv
-COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uvx /bin/uvx
+COPY --from=ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 /uv  /bin/uv
+COPY --from=ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 /uvx /bin/uvx
 
 USER root
 

python/.devfile/Containerfile.client

@@ -1,6 +1,6 @@
-FROM --platform=$BUILDPLATFORM ghcr.io/astral-sh/uv:0.11.19 AS uv
+FROM --platform=$BUILDPLATFORM ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 AS uv
 
-FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/ubi:9.5 AS builder
+FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/ubi:9.8-1781496985@sha256:1b99266db480e8aa6dfda6900697a07ec99334095b4f87d1687edfc06c965132 AS builder
 RUN dnf install -y make git && \
     dnf clean all && \
     rm -rf /var/cache/dnf
@@ -9,7 +9,7 @@ ADD . /src
 RUN make -C /src/python build
 
 
-FROM quay.io/devfile/base-developer-image:ubi9-latest
+FROM quay.io/devfile/base-developer-image:ubi9-latest@sha256:c9665e37c2b9367b868954bfc3313b3cd91138e598ac8630903d6a96b0c7c878
 LABEL maintainer="jumpstarter.dev"
 
 LABEL name="devfile/udi9/jumpstarter-client"

python/Dockerfile

@@ -1,17 +1,17 @@
-FROM --platform=$BUILDPLATFORM ghcr.io/astral-sh/uv:0.11.19 AS uv
+FROM --platform=$BUILDPLATFORM ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 AS uv
 
-FROM --platform=$BUILDPLATFORM fedora:43 AS builder
+FROM --platform=$BUILDPLATFORM fedora:43@sha256:762d73ba1c455232b0272c5d445a34f36c4b9f421cbc05ce8102552325b6a222 AS builder
 RUN dnf install -y make git && \
     dnf clean all && \
     rm -rf /var/cache/dnf
 COPY --from=uv /uv /uvx /bin/
 
-FROM fedora:43 AS product
+FROM fedora:43@sha256:762d73ba1c455232b0272c5d445a34f36c4b9f421cbc05ce8102552325b6a222 AS product
 RUN dnf install -y python3 ustreamer libusb1 android-tools python3-libgpiod curl \
     nftables dnsmasq iproute procps-ng tcpdump && \
     dnf clean all && \
     rm -rf /var/cache/dnf
-COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.21@sha256:ff07b86af50d4d9391d9daf4ff89ce427bc544f9aae87057e69a1cc0aa369946 /uv /uvx /bin/
 
 ARG FLS_VERSION=0.2.0
 RUN ARCH=$(uname -m) && \

python/Dockerfile.utils

@@ -1,4 +1,4 @@
-FROM fedora:43
+FROM fedora:43@sha256:762d73ba1c455232b0272c5d445a34f36c4b9f421cbc05ce8102552325b6a222
 RUN dnf install -y kubernetes-client easy-rsa trurl && \
     dnf clean all && \
     rm -rf /var/cache/dnf