chore(deps): pin dependencies (#450)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

api/Dockerfile

@@ -4,7 +4,7 @@ COPY *.json ./
 RUN npm ci --omit=dev --ignore-scripts
 
 # Deployment container
-FROM gcr.io/distroless/nodejs22:nonroot
+FROM gcr.io/distroless/nodejs22:nonroot@sha256:7461370c8473cfcbf5def249423d5e8301b0e6b98cb256b3c8707f0201c2ea4a
 ENV NODE_ENV production
 
 # Copy over app

charts/pubcode/values.yaml

@@ -197,7 +197,7 @@ database:
     - name: database-init
       registry: 'ghcr.io' # example, it includes registry
       repository: 'bcgov/nr-containers' # example, it includes repository
-      image: mongo # the exact component name, be it backend, api-1 etc...
+      image: mongo@sha256:2e018e386e891d2e4239aca6035fb7701dac51b72891247ecd2f95ff8a167859 # the exact component name, be it backend, api-1 etc...
       tag: 7.0.2 # the tag of the image, it can be latest, 1.0.0 etc..., or the sha256 hash
       command:
         - "sh"
@@ -214,7 +214,7 @@ database:
     - name: database
       registry: 'ghcr.io' # example, it includes registry
       repository: 'bcgov/nr-containers' # example, it includes repository
-      image: mongo # the exact component name, be it backend, api-1 etc...
+      image: mongo@sha256:2e018e386e891d2e4239aca6035fb7701dac51b72891247ecd2f95ff8a167859 # the exact component name, be it backend, api-1 etc...
       tag: 7.0.2 # the tag of the image, it can be latest, 1.0.0 etc..., or the sha256 hash
       envFrom:
         secretRef:

docker-compose.yml

@@ -13,7 +13,7 @@ services:
     restart: unless-stopped
 
   mongo-express: # The admin UI container for mongoDB
-    image: mongo-express
+    image: mongo-express@sha256:1b23d7976f0210dbec74045c209e52fbb26d29b2e873d6c6fa3d3f0ae32c2a64
     restart: unless-stopped
     ports:
       - "8001:8081"