chore(deps): pin dependencies

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

docker-compose-cloud.yml

@@ -7,7 +7,7 @@ services:
   # auto-logs from those traces.
   # Includes Metrics, Logs, Traces and Profiles.
   alloy:
-    image: grafana/alloy:v1.17.0
+    image: grafana/alloy:v1.17.0@sha256:41c41849989b7e054ccbadc17938ee1e5592fe26bfbc56ef3ffc109c0b0b2739
     ports:
       - "12347:12345"
       - "12348:12348"
@@ -28,7 +28,7 @@ services:
 
   # A RabbitMQ queue used to send message between the requester and the server microservices.
   mythical-queue:
-    image: rabbitmq:management
+    image: rabbitmq:management@sha256:eb5295d083325da5929a5ade766684d4019ffd2bce8bc7e43d6f9a05cafc8646
     restart: always
     ports:
       - "5672:5672"
@@ -42,7 +42,7 @@ services:
   # A postgres DB used to store data by the API server microservice.
   mythical-database:
   mythical-database:
-    image: postgres:18.4
+    image: postgres:18.4@sha256:a02db8cac496f15b094798a38254f14d6e00741f709360e5e00bb6668ea31636
     restart: always
     environment:
       POSTGRES_PASSWORD: "mythical"
@@ -58,7 +58,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-requester
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest@sha256:7013d060cd092dd1c928371fbea09d361fd1137907b9b6089e15615f5f5f3533
     restart: always
     depends_on:
       mythical-queue:
@@ -85,7 +85,7 @@ services:
     #  args:
     #    - REACT_APP_API_URL=/api
     # By default, this will try and send to Alloy instead of Grafana Cloud Frontend.
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-frontend-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-frontend-latest@sha256:e92da1f06562dabd0b2a18eec3ec36390382699547d177ee542fbec31f8673c5
     restart: always
     depends_on:
       mythical-server:
@@ -105,7 +105,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-server
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest@sha256:359afe4e8eaffa3bf1e84afea55456c96cc443aca76c5fc6f72adf1f69f5e183
     restart: always
     ports:
       - "4000:4000"
@@ -134,7 +134,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-recorder
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest@sha256:00010860619f5887b4b144f499a9a84c9dc9df39ee7b2221d56e8315b8d4e91f
     restart: always
     depends_on:
       mythical-queue:

docker-compose-otel.yml

@@ -5,7 +5,7 @@ volumes:
 services:
   # The opentelemetry-collector batches and processes traces sent to it.
   opentelemetry-collector:
-    image: otel/opentelemetry-collector-contrib:0.154.0
+    image: otel/opentelemetry-collector-contrib:0.154.0@sha256:b3079f45e19bdb7326bf49cdddce6cf60dfd865138db39f2733ea48ab17bc4cb
     ports:
       - "12347:12345"
       - "12348:12348"
@@ -19,7 +19,7 @@ services:
 
   # The Grafana dashboarding server.
   grafana:
-    image: grafana/grafana:13.0.2
+    image: grafana/grafana:13.0.2@sha256:5dad0df181cb644a14e13617b913b261a54f7d4fd4510721dba420929f35bea2
     volumes:
       - "./grafana/definitions:/var/lib/grafana/dashboards"
       - "./grafana/provisioning:/etc/grafana/provisioning"
@@ -34,7 +34,7 @@ services:
 
   # A RabbitMQ queue used to send message between the requester and the server microservices.
   mythical-queue:
-    image: rabbitmq:management
+    image: rabbitmq:management@sha256:eb5295d083325da5929a5ade766684d4019ffd2bce8bc7e43d6f9a05cafc8646
     restart: always
     ports:
       - "5672:5672"
@@ -47,7 +47,7 @@ services:
 
   # A postgres DB used to store data by the API server microservice.
   mythical-database:
-    image: postgres:18.4
+    image: postgres:18.4@sha256:a02db8cac496f15b094798a38254f14d6e00741f709360e5e00bb6668ea31636
     restart: always
     environment:
       POSTGRES_PASSWORD: "mythical"
@@ -63,7 +63,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-requester
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest@sha256:7013d060cd092dd1c928371fbea09d361fd1137907b9b6089e15615f5f5f3533
     restart: always
     depends_on:
       mythical-queue:
@@ -91,7 +91,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-server
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest@sha256:359afe4e8eaffa3bf1e84afea55456c96cc443aca76c5fc6f72adf1f69f5e183
     restart: always
     ports:
       - "4000:4000"
@@ -115,7 +115,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-recorder
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest@sha256:00010860619f5887b4b144f499a9a84c9dc9df39ee7b2221d56e8315b8d4e91f
     restart: always
     depends_on:
       mythical-queue:
@@ -135,7 +135,7 @@ services:
   # The Tempo service stores traces send to it by Grafana opentelemetry-collector, and takes
   # queries from Grafana to visualise those traces.
   tempo:
-    image: grafana/tempo:3.0.2
+    image: grafana/tempo:3.0.2@sha256:cda87c212d8c584dc0b89e337e7ed648a5100feb657e5d528480ee4fa03dbbe3
     ports:
       - "3200:3200"
       - "55680:55680"
@@ -148,29 +148,29 @@ services:
   # The Loki service stores logs sent to it, and takes queries from Grafana
   # to visualise those logs.
   loki:
-    image: grafana/loki:3.7.2
+    image: grafana/loki:3.7.2@sha256:191d4fdfb7264f16989f0a57f320872620a5a7c2ceeec6229212c4190ec49b86
     command: ["--pattern-ingester.enabled=true", "-config.file=/etc/loki/loki.yaml"]
     ports:
       - "3100:3100"
     volumes:
       - "./loki/loki.yaml:/etc/loki/loki.yaml"
 
   mimir:
-    image: grafana/mimir:3.1.0
+    image: grafana/mimir:3.1.0@sha256:804c94deebdcbfdd1b01a3d79a26bcb2a54923b3c0b293031183008a257f99c5
     command: ["-target=all", "-ingester.native-histograms-ingestion-enabled=true", "-config.file=/etc/mimir.yaml"]
     ports:
       - "9009:9009"
     volumes:
       - "./mimir/mimir.yaml:/etc/mimir.yaml"
 
   pyroscope:
-    image: grafana/pyroscope:2.1.0
+    image: grafana/pyroscope:2.1.0@sha256:73b23dbb99f154a0803c136abafdff825475f415dd4d4587538d014c672b5a55
     ports:
       - "4040:4040"
     command: ["server"]
 
   k6:
-    image: grafana/k6:1.7.1
+    image: grafana/k6:1.7.1@sha256:4fd3a694926b064d3491d9b02b01cde886583c4931f1223816e3d9a7bdfa7e0f
     volumes:
       - "./k6:/scripts"
     environment:

docker-compose.yml

@@ -7,7 +7,7 @@ services:
   # auto-logs from those traces.
   # Includes Metrics, Logs, Traces and Profiles.
   alloy:
-    image: grafana/alloy:v1.17.0
+    image: grafana/alloy:v1.17.0@sha256:41c41849989b7e054ccbadc17938ee1e5592fe26bfbc56ef3ffc109c0b0b2739
     ports:
       - "12350:12350"
       - "12347:12345"
@@ -28,7 +28,7 @@ services:
 
   # The Grafana dashboarding server.
   grafana:
-    image: grafana/grafana:13.0.2
+    image: grafana/grafana:13.0.2@sha256:5dad0df181cb644a14e13617b913b261a54f7d4fd4510721dba420929f35bea2
     volumes:
       - "./grafana/definitions:/var/lib/grafana/dashboards"
       - "./grafana/provisioning:/etc/grafana/provisioning"
@@ -43,7 +43,7 @@ services:
 
   # A RabbitMQ queue used to send message between the requester and the server microservices.
   mythical-queue:
-    image: rabbitmq:management
+    image: rabbitmq:management@sha256:eb5295d083325da5929a5ade766684d4019ffd2bce8bc7e43d6f9a05cafc8646
     restart: always
     ports:
       - "5672:5672"
@@ -56,7 +56,7 @@ services:
 
   # A postgres DB used to store data by the API server microservice.
   mythical-database:
-    image: postgres:18.4
+    image: postgres:18.4@sha256:a02db8cac496f15b094798a38254f14d6e00741f709360e5e00bb6668ea31636
     restart: always
     environment:
       POSTGRES_PASSWORD: "mythical"
@@ -72,7 +72,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-requester
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-requester-latest@sha256:7013d060cd092dd1c928371fbea09d361fd1137907b9b6089e15615f5f5f3533
     restart: always
     depends_on:
       mythical-queue:
@@ -103,7 +103,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-server
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-server-latest@sha256:359afe4e8eaffa3bf1e84afea55456c96cc443aca76c5fc6f72adf1f69f5e183
     restart: always
     ports:
       - "4000:4000"
@@ -132,7 +132,7 @@ services:
     #  dockerfile: docker/Dockerfile
     #  args:
     #    SERVICE: mythical-beasts-recorder
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-recorder-latest@sha256:00010860619f5887b4b144f499a9a84c9dc9df39ee7b2221d56e8315b8d4e91f
     restart: always
     depends_on:
       mythical-queue:
@@ -156,7 +156,7 @@ services:
     #  dockerfile: Dockerfile
     #  args:
     #    - REACT_APP_API_URL=/api
-    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-frontend-latest
+    image: ghcr.io/grafana/intro-to-mltp:mythical-beasts-frontend-latest@sha256:e92da1f06562dabd0b2a18eec3ec36390382699547d177ee542fbec31f8673c5
     restart: always
     depends_on:
       mythical-server:
@@ -169,7 +169,7 @@ services:
   # The Tempo service stores traces send to it by Grafana Alloy, and takes
   # queries from Grafana to visualise those traces.
   tempo:
-    image: grafana/tempo:3.0.2
+    image: grafana/tempo:3.0.2@sha256:cda87c212d8c584dc0b89e337e7ed648a5100feb657e5d528480ee4fa03dbbe3
     ports:
       - "3200:3200"
       - "9411:9411"
@@ -183,29 +183,29 @@ services:
   # The Loki service stores logs sent to it, and takes queries from Grafana
   # to visualise those logs.
   loki:
-    image: grafana/loki:3.7.2
+    image: grafana/loki:3.7.2@sha256:191d4fdfb7264f16989f0a57f320872620a5a7c2ceeec6229212c4190ec49b86
     command: ["--pattern-ingester.enabled=true", "-config.file=/etc/loki/loki.yaml"]
     ports:
       - "3100:3100"
     volumes:
       - "./loki/loki.yaml:/etc/loki/loki.yaml"
 
   mimir:
-    image: grafana/mimir:3.1.0
+    image: grafana/mimir:3.1.0@sha256:804c94deebdcbfdd1b01a3d79a26bcb2a54923b3c0b293031183008a257f99c5
     command: ["-target=all", "-ingester.native-histograms-ingestion-enabled=true", "-config.file=/etc/mimir.yaml"]
     ports:
       - "9009:9009"
     volumes:
       - "./mimir/mimir.yaml:/etc/mimir.yaml"
 
   pyroscope:
-    image: grafana/pyroscope:2.1.0
+    image: grafana/pyroscope:2.1.0@sha256:73b23dbb99f154a0803c136abafdff825475f415dd4d4587538d014c672b5a55
     ports:
       - "4040:4040"
     command: ["server"]
 
   k6:
-    image: grafana/k6:1.7.1
+    image: grafana/k6:1.7.1@sha256:4fd3a694926b064d3491d9b02b01cde886583c4931f1223816e3d9a7bdfa7e0f
     volumes:
       - "./k6:/scripts"
     environment:

source/docker/Dockerfile

@@ -1,5 +1,5 @@
 # Multistage build - allows for smaller final images post Python build
-FROM node:23-alpine3.20 AS builder
+FROM node:23-alpine3.20@sha256:78d6e102e0889545bcf80ded837034f485ba7f7ebe09211d0f2d383082a7a047 AS builder
 ARG SERVICE
 
 WORKDIR /usr/src/app
@@ -22,7 +22,7 @@ RUN npm install --production \
     && rm -rf /tmp/*
 
 # Create a slimmer image using the built node_modules
-FROM node:23-alpine3.20
+FROM node:23-alpine3.20@sha256:78d6e102e0889545bcf80ded837034f485ba7f7ebe09211d0f2d383082a7a047
 ARG SERVICE
 
 WORKDIR /usr/src/app