From 9949f7443b1c4ba97d0d3aed36499f5bb2aa4f90 Mon Sep 17 00:00:00 2001
From: Trask Stalnaker <trask.stalnaker@gmail.com>
Date: Thu, 14 Aug 2025 16:11:22 -0700
Subject: [PATCH 1/2] Pin weaver version with hash

---
 .github/renovate.json5 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 23a66c47..8870c80b 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -33,8 +33,10 @@
         '/^build.gradle.kts$/',
       ],
       matchStrings: [
-        '"(?<depName>otel/weaver):(?<currentValue>[^"]+)"',
+        '(?<depName>otel/weaver):(?<currentValue>[^@"]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?',
       ],
+      autoReplaceStringTemplate: '{{depName}}:{{newValue}}{{#if newDigest}}@{{newDigest}}{{/if}}',
+      versioningTemplate: 'docker',
     },
   ],
 }

From 127d174c75237afd3720bba5640b724b21942819 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 15 Aug 2025 02:33:28 +0000
Subject: [PATCH 2/2] chore(deps): pin otel/weaver docker tag to 5ca4901

---
 build.gradle.kts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle.kts b/build.gradle.kts
index 5760449c..5fba26c1 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -115,7 +115,7 @@ fun generateTask(taskName: String, incubating: Boolean) {
         "--mount", "type=bind,source=${modelPath},target=/home/weaver/source,readonly",
         "--mount", "type=bind,source=$projectDir/buildscripts/templates,target=/home/weaver/templates,readonly",
         "--mount", "type=bind,source=$projectDir/$outputDir,target=/home/weaver/target",
-        "otel/weaver:v0.16.1",
+        "otel/weaver:v0.16.1@sha256:5ca4901b460217604ddb83feaca05238e2b016a226ecfb9b87a95555918a03af",
         "registry", "generate",
         "--registry=/home/weaver/source",
         "--templates=/home/weaver/templates",