Pin dependencies

renovate-pagopa[bot] · web-flow · commit 469fcfe31988 · 2026-01-16T05:03:56.000Z
diff --git a/.github/actions/clone-soap-api-repos/action.yaml b/.github/actions/clone-soap-api-repos/action.yaml
@@ -16,10 +16,10 @@ runs:
   using: "composite"
   steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version: '18.18.0'
 
diff --git a/.github/workflows/delete_unused_directories.yaml b/.github/workflows/delete_unused_directories.yaml
@@ -30,7 +30,7 @@ jobs:
       ENV_SHORT: ${{ fromJSON('{"dev":"d","uat":"u","prod":"p"}')[inputs.environment] }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.JS
         uses: ./.github/actions/setup-node
diff --git a/.github/workflows/deploy_ac_sync_lambda.yaml b/.github/workflows/deploy_ac_sync_lambda.yaml
@@ -26,10 +26,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           node-version: '20.x'
       
@@ -68,7 +68,7 @@ jobs:
           path: ./packages/active-campaign-client/target
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
         with:
           role-to-assume: ${{ secrets.DEPLOY_IAM_ROLE }}
           aws-region: eu-south-1
diff --git a/.github/workflows/invalidate_cloudfront_asset_bucket_cache.yaml b/.github/workflows/invalidate_cloudfront_asset_bucket_cache.yaml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Configure AWS Credentials
         uses: ./.github/actions/configure-aws-credentials
diff --git a/.github/workflows/sync_gitbook_docs.yaml b/.github/workflows/sync_gitbook_docs.yaml
@@ -65,10 +65,10 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Checkout devportal-docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: pagopa/devportal-docs
           ref: docs/from-gitbook
@@ -216,10 +216,10 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Checkout devportal-docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: pagopa/devportal-docs
           ref: docs/from-gitbook
diff --git a/.github/workflows/sync_gitbook_docs_legacy.yaml b/.github/workflows/sync_gitbook_docs_legacy.yaml
@@ -53,11 +53,11 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Checkout devportal-docs repo
         if: inputs.generate_metadata_only == false
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: pagopa/devportal-docs
           ref: docs/from-gitbook
@@ -183,10 +183,10 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Checkout devportal-docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: pagopa/devportal-docs
           ref: docs/from-gitbook
diff --git a/.github/workflows/sync_soap_api_repo.yaml b/.github/workflows/sync_soap_api_repo.yaml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout current repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Fetch and clone SOAP APIs
         uses: ./.github/actions/clone-soap-api-repos
diff --git a/apps/chatbot-evaluate/docker/lambda.Dockerfile b/apps/chatbot-evaluate/docker/lambda.Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=$LAMBDA_TASK_ROOT
diff --git a/apps/chatbot-index/docker/compose.test.yaml b/apps/chatbot-index/docker/compose.test.yaml
@@ -19,7 +19,7 @@ services:
     command: ["src.lambda_refresh_index.lambda_handler"]
 
   redis:
-    image: redis/redis-stack:7.2.0-v13
+    image: redis/redis-stack:7.2.0-v13@sha256:2b000b938e407d14acafa9b7affd4c5a94ceeec572b25b15dcef0d3a6c064d7e
     ports:
       - "6379:6379"
       - "8001:8001"
@@ -35,7 +35,7 @@ services:
         condition: service_completed_successfully
 
   redis-seed:
-    image: alpine:3.18
+    image: alpine:3.18@sha256:de0eb0b3f2a47ba1eb89389859a9bd88b28e82f5826b6969ad604979713c2d4f
     user: root
     volumes:
       - redis_data:/data
@@ -45,7 +45,7 @@ services:
 
   redis-fix-perms:
     # one-shot: ensure /data owned by redis user before redis starts
-    image: redis/redis-stack:7.2.0-v13
+    image: redis/redis-stack:7.2.0-v13@sha256:2b000b938e407d14acafa9b7affd4c5a94ceeec572b25b15dcef0d3a6c064d7e
     user: root
     volumes:
       - redis_data:/data
@@ -56,7 +56,7 @@ services:
     restart: "no"
     
   motoserver:
-    image: motoserver/moto:5.1.14
+    image: motoserver/moto:5.1.14@sha256:800719627036dc38dc699e9f314f624f2c98ac3d8bb754db078cb2698f08ee77
     environment:
       - MOTO_PORT=3002
 
diff --git a/apps/chatbot-index/docker/create_index.Dockerfile b/apps/chatbot-index/docker/create_index.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12.4-slim-bullseye
+FROM python:3.12.4-slim-bullseye@sha256:26ce493641ad3b1c8a6202117c31340c7bbb2dc126f1aeee8ea3972730a81dc6
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=/app
diff --git a/apps/chatbot-index/docker/lambda_refresh_index.Dockerfile b/apps/chatbot-index/docker/lambda_refresh_index.Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=$LAMBDA_TASK_ROOT
diff --git a/apps/chatbot-index/docker/lambda_refresh_index.test.Dockerfile b/apps/chatbot-index/docker/lambda_refresh_index.test.Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=$LAMBDA_TASK_ROOT
diff --git a/apps/chatbot-index/poetry.lock b/apps/chatbot-index/poetry.lock
diff --git a/apps/chatbot-index/pyproject.toml b/apps/chatbot-index/pyproject.toml
@@ -24,7 +24,7 @@ httpx = "^0.28.1"
 pytest = "^8.3.5"
 
 [tool.poetry.group.dev.dependencies]
-jupyter = "^1.1.1"
+jupyter = "1.1.1"
 
 [build-system]
 build-backend = "poetry.core.masonry.api"
diff --git a/apps/chatbot-monitor/docker/lambda_monitor.Dockerfile b/apps/chatbot-monitor/docker/lambda_monitor.Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=$LAMBDA_TASK_ROOT
diff --git a/apps/chatbot/docker/app.Dockerfile b/apps/chatbot/docker/app.Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b
 ARG DEBIAN_FRONTEND=noninteractive
 
 ENV PYTHONPATH=$LAMBDA_TASK_ROOT
diff --git a/apps/chatbot/docker/app.local.Dockerfile b/apps/chatbot/docker/app.local.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12.4-slim-bullseye
+FROM python:3.12.4-slim-bullseye@sha256:26ce493641ad3b1c8a6202117c31340c7bbb2dc126f1aeee8ea3972730a81dc6
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
diff --git a/apps/chatbot/docker/app.test.Dockerfile b/apps/chatbot/docker/app.test.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12.4-slim-bullseye
+FROM python:3.12.4-slim-bullseye@sha256:26ce493641ad3b1c8a6202117c31340c7bbb2dc126f1aeee8ea3972730a81dc6
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
diff --git a/apps/chatbot/docker/compose.lambda.local.yaml b/apps/chatbot/docker/compose.lambda.local.yaml
@@ -41,7 +41,7 @@ services:
       - ntw
 
   postgres:
-    image: postgres:17.2-alpine
+    image: postgres:17.2-alpine@sha256:7e5df973a74872482e320dcbdeb055e178d6f42de0558b083892c50cda833c96
     restart: always
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U postgres"]
@@ -57,7 +57,7 @@ services:
       - ntw
 
   dynamodb:
-    image: amazon/dynamodb-local:2.5.2
+    image: amazon/dynamodb-local:2.5.2@sha256:d7ebddeb60fa418bcda218a6c6a402a58441b2a20d54c9cb1d85fd5194341753
     environment:
       - AWS_ACCESS_KEY_ID=dummy
       - AWS_SECRET_ACCESS_KEY=dummy
@@ -66,7 +66,7 @@ services:
       - ntw
 
   redis:
-    image: redis/redis-stack:7.2.0-v13
+    image: redis/redis-stack:7.2.0-v13@sha256:2b000b938e407d14acafa9b7affd4c5a94ceeec572b25b15dcef0d3a6c064d7e
     ports:
       - "6379:6379"
       - "8001:8001"
@@ -76,7 +76,7 @@ services:
       - ntw
 
   langfuse:
-    image: langfuse/langfuse:2
+    image: langfuse/langfuse:2@sha256:85c278dcab96c15db94191a5c1664f85aba2d7fb6771a00e99681c902c4b7015
     depends_on:
       postgres:
         condition: service_healthy
@@ -103,7 +103,7 @@ services:
       - ntw
 
   motoserver:
-    image: motoserver/moto:5.1.0
+    image: motoserver/moto:5.1.0@sha256:aaf5f4a72412b753b2115417e26360612564d3a29b1831f9316708e15138d699
     networks:
       - ntw
 volumes:
diff --git a/apps/chatbot/docker/compose.test.yaml b/apps/chatbot/docker/compose.test.yaml
diff --git a/apps/chatbot/docker/compose.yaml b/apps/chatbot/docker/compose.yaml
diff --git a/apps/chatbot/load-test/docker-compose.yml b/apps/chatbot/load-test/docker-compose.yml
diff --git a/apps/chatbot/poetry.lock b/apps/chatbot/poetry.lock
diff --git a/apps/chatbot/pyproject.toml b/apps/chatbot/pyproject.toml

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM public.ecr.aws/lambda/python:3.12`
	`1`	`+FROM public.ecr.aws/lambda/python:3.12@sha256:6714e98ca58fa2c40128ab4f18b55e24cb2d691fedc770c03271ae17a2f7243b`
`2`	`2`	`ARG DEBIAN_FRONTEND=noninteractive`
`3`	`3`
`4`	`4`	`ENV PYTHONPATH=$LAMBDA_TASK_ROOT`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM python:3.12.4-slim-bullseye`
	`1`	`+FROM python:3.12.4-slim-bullseye@sha256:26ce493641ad3b1c8a6202117c31340c7bbb2dc126f1aeee8ea3972730a81dc6`
`2`	`2`	`ARG DEBIAN_FRONTEND=noninteractive`
`3`	`3`
`4`	`4`	`ENV PYTHONPATH=/app`