chore(deps): pin dependencies

Author: pactflow-renovate-bot[bot]

.github/workflows/build.yml

@@ -17,7 +17,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Test (ruby standalone - docker)
         run: GIT_BRANCH=${GITHUB_REF:11} make test
       - name: Test (native standalone - docker)
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Can I deploy?
         run: GIT_BRANCH=${GITHUB_REF:11} make can_i_deploy
@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: can-i-deploy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Deploy
         run: GIT_BRANCH=${GITHUB_REF:11} make deploy

.github/workflows/verify_changed_pact.yml

@@ -17,8 +17,8 @@ jobs:
   verify-changed-pact:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5
         with:
           python-version: '3.8' 
           architecture: 'x64' 

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11
+FROM python:3.11@sha256:14b4620f59a90f163dfa6bd252b68743f9a41d494a9fde935f9d7669d98094bb
 
 WORKDIR /code
 

docker-compose.yml

@@ -10,7 +10,7 @@ services:
       - PORT=8000
 
   pact_verifier:
-    image: pactfoundation/pact-cli:latest
+    image: pactfoundation/pact-cli:latest@sha256:68a2a0b467b839c83abc802b39c84279c10b5ef1aa7758f1c4109f59b7f95841
     depends_on:
       - api
     environment:
@@ -32,7 +32,7 @@ services:
       --wait 10
   
   pact_verifier_native:
-    image: pactfoundation/pact-ref-verifier:latest
+    image: pactfoundation/pact-ref-verifier:latest@sha256:c511079f839bf4f291534e36a416f03f4372660851ce4f2aeaffcfd3450e71cf
     depends_on:
       - api
     environment: