chore(deps): pin dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/publish-docs.yml

@@ -26,10 +26,10 @@ jobs:
       pages: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
         with:
           # Use the latest LTS version of Node.js already installed on the runner.
           node-version: latest
@@ -38,7 +38,7 @@ jobs:
           cache-dependency-path: website/yarn.lock
 
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
 
       - name: Install dependencies
         working-directory: website
@@ -49,7 +49,7 @@ jobs:
         run: yarn build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
         with:
           path: website/build
 
@@ -65,4 +65,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

.github/workflows/sync_docs.yml

@@ -20,7 +20,7 @@ jobs:
       VERSION: ${{ github.event.client_payload.tag || github.event.inputs.tag }}
     steps:
       - name: Checkout docs repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
           token: '${{ secrets.REPO_PAT }}'
@@ -29,6 +29,6 @@ jobs:
           echo "Importing CloudNativePG docs for version: ${{ env.VERSION }}"
           ./scripts/import_docs.sh "${{ env.VERSION }}"
       - name: Commit and push changes
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
         with:
           message: "docs: import CloudNativePG ${{ env.VERSION }}"

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:lts-alpine
+FROM node:lts-alpine@sha256:931d7d57f8c1fd0e2179dbff7cc7da4c9dd100998bc2b32afc85142d8efbc213
 
 COPY website /website