chore(deps): pin dependencies

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.4-alpine AS xk6-client-tracing-build
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS xk6-client-tracing-build
 
 RUN apk add --no-cache \
     build-base \
@@ -15,7 +15,7 @@ RUN go mod download
 COPY . .
 RUN make build
 
-FROM alpine:latest
+FROM alpine:latest@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
 
 COPY --from=xk6-client-tracing-build /opt/xk6-client-tracing/k6-tracing /k6-tracing
 COPY ./examples/template/template.js /example-script.js

examples/param/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3"
 
 services:
   k6-tracing:
-    image: ghcr.io/grafana/xk6-client-tracing:latest
+    image: ghcr.io/grafana/xk6-client-tracing:latest@sha256:c176112df6a6aac970d54b0b2e2db950642378496c6967adc8a401179819fab0
     command:
       - run
       - /param.js
@@ -13,7 +13,7 @@ services:
     restart: always
 
   otel-collector:
-    image: otel/opentelemetry-collector:latest
+    image: otel/opentelemetry-collector:latest@sha256:a43e68866ce4cfa701fb6711de3111b72660e40ebb05a79d1759b002938b608f
     command:
       - --config=/collector-config.yaml
     volumes:

examples/template/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3"
 
 services:
   k6-tracing:
-    image: ghcr.io/grafana/xk6-client-tracing:latest
+    image: ghcr.io/grafana/xk6-client-tracing:latest@sha256:c176112df6a6aac970d54b0b2e2db950642378496c6967adc8a401179819fab0
     command:
       - run
       - /template.js
@@ -13,7 +13,7 @@ services:
     restart: always
 
   otel-collector:
-    image: otel/opentelemetry-collector:latest
+    image: otel/opentelemetry-collector:latest@sha256:a43e68866ce4cfa701fb6711de3111b72660e40ebb05a79d1759b002938b608f
     command:
       - --config=/collector-config.yaml
     volumes: