chore(deps): pin dependencies (#1975)

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | pinDigest | -> `b4ffde6` | | [actions/setup-node](https://togithub.com/actions/setup-node) | action | pinDigest | -> `b39b52d` | | [actions/setup-python](https://togithub.com/actions/setup-python) | action | pinDigest | -> `65d7f2d` | | [aws-actions/amazon-ecr-login](https://togithub.com/aws-actions/amazon-ecr-login) | action | pinDigest | -> `2fc7ace` | | [aws-actions/amazon-ecs-deploy-task-definition](https://togithub.com/aws-actions/amazon-ecs-deploy-task-definition) | action | pinDigest | -> `df96430` | | [aws-actions/amazon-ecs-render-task-definition](https://togithub.com/aws-actions/amazon-ecs-render-task-definition) | action | pinDigest | -> `4225e0b` | | [aws-actions/configure-aws-credentials](https://togithub.com/aws-actions/configure-aws-credentials) | action | pinDigest | -> `5fd3084` | | darthsim/imgproxy | | pinDigest | -> `0facd35` | | [docker/build-push-action](https://togithub.com/docker/build-push-action) | action | pinDigest | -> `0a97817` | | [docker/build-push-action](https://togithub.com/docker/build-push-action) | action | pinDigest | -> `4a13e50` | | [docker/login-action](https://togithub.com/docker/login-action) | action | pinDigest | -> `465a078` | | [docker/login-action](https://togithub.com/docker/login-action) | action | pinDigest | -> `343f7c4` | | [docker/setup-buildx-action](https://togithub.com/docker/setup-buildx-action) | action | pinDigest | -> `885d146` | | [docker/setup-buildx-action](https://togithub.com/docker/setup-buildx-action) | action | pinDigest | -> `f95db51` | | [docker/setup-qemu-action](https://togithub.com/docker/setup-qemu-action) | action | pinDigest | -> `6882732` | | [google-github-actions/release-please-action](https://togithub.com/google-github-actions/release-please-action) | action | pinDigest | -> `db8f2c6` | | kong | | pinDigest | -> `1b53405` | | [pavelzw/pytest-action](https://togithub.com/pavelzw/pytest-action) | action | pinDigest | -> `510c5e9` | | postgrest/postgrest | | pinDigest | -> `23b2dab` | | python | final | pinDigest | -> `0c1fbb2` | | redis | | pinDigest | -> `a7cee7c` | | supabase/edge-runtime | | pinDigest | -> `4e02aac` | | supabase/gotrue | | pinDigest | -> `b503f1f` | | supabase/logflare | | pinDigest | -> `e693c78` | | supabase/postgres | | pinDigest | -> `fb8387f` | | supabase/postgres-meta | | pinDigest | -> `31a107d` | | supabase/realtime | | pinDigest | -> `634a59e` | | supabase/storage-api | | pinDigest | -> `2cd146f` | | supabase/studio | | pinDigest | -> `393669f` | | timberio/vector | | pinDigest | -> `4bc04ac` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/StanGirard/quivr).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-11 14:36:35 +03:00 · 2024-01-04 14:00:18 +01:00 · 2024-01-04 14:00:18 +01:00 · fe373fdd10
commit fe373fdd10
parent 92012a81f9
13 changed files with 69 additions and 69 deletions
--- a/.github/workflows/aws-preview.yml
+++ b/.github/workflows/aws-preview.yml
@ -20,10 +20,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -31,23 +31,23 @@ jobs:

    - name: Login to Amazon ECR
      id: login-ecr
-      uses: aws-actions/amazon-ecr-login@v1
+      uses: aws-actions/amazon-ecr-login@2fc7aceee09e9e4a7105c0d060c656fad0b4f63d # v1
    
    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
      with:
        registry: ghcr.io
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - name: Login to Docker Hub
-      uses: docker/login-action@v3
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
      with:
        username: ${{ secrets.DOCKERHUB_USERNAME }}
        password: ${{ secrets.DOCKERHUB_TOKEN }}
    
-    - uses: docker/setup-qemu-action@v3
+    - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3
    
    - name: Create Docker Cacha Storage Backend
      run: |
@ -57,7 +57,7 @@ jobs:
        ls -la
    - name: Build, tag, and push image to Amazon ECR
      id: build-image
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5
      env:
        ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
        IMAGE_TAG: ${{ github.sha }}
@ -90,10 +90,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      
    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -101,14 +101,14 @@ jobs:

    - name: Fill in the new image ID in the Amazon ECS task definition for ${{ matrix.name }}
      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
+      uses: aws-actions/amazon-ecs-render-task-definition@4225e0b507142a2e432b018bc3ccb728559b437a # v1
      with:
        task-definition: ${{ matrix.task_definition }}
        container-name: ${{ matrix.container }}
        image: ${{env.ECR_REGISTRY}}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}

    - name: Deploy Amazon ECS task definition for ${{ matrix.name }}
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+      uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a # v1
      with:
        task-definition: ${{ steps.task-def.outputs.task-definition }}
        service: ${{ matrix.service }}
--- a/.github/workflows/aws-strapi.yml
+++ b/.github/workflows/aws-strapi.yml
@ -20,10 +20,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -31,17 +31,17 @@ jobs:

    - name: Login to Amazon ECR
      id: login-ecr
-      uses: aws-actions/amazon-ecr-login@v1
+      uses: aws-actions/amazon-ecr-login@2fc7aceee09e9e4a7105c0d060c656fad0b4f63d # v1
    
    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
      with:
        registry: ghcr.io
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GITHUB_TOKEN }}
    
    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
    
    - name: Create Docker Cacha Storage Backend
      run: |
@ -51,7 +51,7 @@ jobs:
        ls -la
    - name: Build, tag, and push image to Amazon ECR
      id: build-image
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@0a97817b6ade9f46837855d676c4cca3a2471fc9 # v4
      env:
        ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
        IMAGE_TAG: ${{ github.sha }}
@ -77,10 +77,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      
    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -88,14 +88,14 @@ jobs:

    - name: Fill in the new image ID in the Amazon ECS task definition for ${{ matrix.name }}
      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
+      uses: aws-actions/amazon-ecs-render-task-definition@4225e0b507142a2e432b018bc3ccb728559b437a # v1
      with:
        task-definition: ${{ matrix.task_definition }}
        container-name: ${{ matrix.container }}
        image: ${{env.ECR_REGISTRY}}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}

    - name: Deploy Amazon ECS task definition for ${{ matrix.name }}
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+      uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a # v1
      with:
        task-definition: ${{ steps.task-def.outputs.task-definition }}
        service: ${{ matrix.service }}
--- a/.github/workflows/aws.yml
+++ b/.github/workflows/aws.yml
@ -19,10 +19,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -30,17 +30,17 @@ jobs:

    - name: Login to Amazon ECR
      id: login-ecr
-      uses: aws-actions/amazon-ecr-login@v1
+      uses: aws-actions/amazon-ecr-login@2fc7aceee09e9e4a7105c0d060c656fad0b4f63d # v1
    
    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
      with:
        registry: ghcr.io
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GITHUB_TOKEN }}
    
    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
    
    - name: Create Docker Cacha Storage Backend
      run: |
@ -50,7 +50,7 @@ jobs:
        ls -la
    - name: Build, tag, and push image to Amazon ECR
      id: build-image
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@0a97817b6ade9f46837855d676c4cca3a2471fc9 # v4
      env:
        ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
        IMAGE_TAG: ${{ github.sha }}
@ -81,10 +81,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      
    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@ -92,14 +92,14 @@ jobs:

    - name: Fill in the new image ID in the Amazon ECS task definition for ${{ matrix.name }}
      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
+      uses: aws-actions/amazon-ecs-render-task-definition@4225e0b507142a2e432b018bc3ccb728559b437a # v1
      with:
        task-definition: ${{ matrix.task_definition }}
        container-name: ${{ matrix.container }}
        image: ${{env.ECR_REGISTRY}}/${{ env.ECR_REPOSITORY }}:${{ github.sha }}

    - name: Deploy Amazon ECS task definition for ${{ matrix.name }}
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+      uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a # v1
      with:
        task-definition: ${{ steps.task-def.outputs.task-definition }}
        service: ${{ matrix.service }}
--- a/.github/workflows/backend-tests.yml
+++ b/.github/workflows/backend-tests.yml
@ -41,9 +41,9 @@ jobs:
        python-version: ["3.11"]

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
        with:
          python-version: ${{ matrix.python-version }}
          cache: "pip"
@ -56,7 +56,7 @@ jobs:
          pip install pyright
          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
      - name: Run pytest
-        uses: pavelzw/pytest-action@v2
+        uses: pavelzw/pytest-action@510c5e90c360a185039bea56ce8b3e7e51a16507 # v2
        with:
          verbose: true
          emoji: true
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@ -13,7 +13,7 @@ jobs:
  release-please:
    runs-on: ubuntu-latest
    steps:
-      - uses: google-github-actions/release-please-action@v3
+      - uses: google-github-actions/release-please-action@db8f2c60ee802b3748b512940dde88eabd7b7e01 # v3
        with:
          release-type: node
          changelog-notes-type: github
--- a/.github/workflows/vercel-preview.yml
+++ b/.github/workflows/vercel-preview.yml
@ -10,7 +10,7 @@ jobs:
    environment: production
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
        with:  
          submodules: 'true'
      - name: Install Vercel CLI
--- a/.github/workflows/vercel.yml
+++ b/.github/workflows/vercel.yml
@ -13,7 +13,7 @@ jobs:
    environment: production
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
        with:  
            submodules: 'true'
      - name: Install Vercel CLI
--- a/.github/workflows/vitest.yml
+++ b/.github/workflows/vitest.yml
@ -21,9 +21,9 @@ jobs:
        node-version: [18]

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4
        with:
          node-version: ${{ matrix.node-version }}
          cache: 'yarn'
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626

 ARG DEV_MODE
 ENV DEV_MODE=$DEV_MODE
--- a/backend/Dockerfile.dev
+++ b/backend/Dockerfile.dev
@ -1,5 +1,5 @@
 # Using a slim version for a smaller base image
-FROM python:3.11.6-slim-bullseye
+FROM python:3.11.6-slim-bullseye@sha256:0c1fbb294096d842ad795ee232d783cab436c90b034210fe894f2bb2f2be7626

 ARG DEV_MODE
 ENV DEV_MODE=$DEV_MODE
--- a/docker-compose-ollama.yml
+++ b/docker-compose-ollama.yml
@ -49,7 +49,7 @@ services:
      - 5050:5050

  redis:
-    image: redis:latest
+    image: redis:latest@sha256:a7cee7c8178ff9b5297cb109e6240f5072cdaaafd775ce6b586c3c704b06458e
    container_name: redis
    restart: always
    ports:
@ -103,7 +103,7 @@ services:

  studio:
    container_name: supabase-studio
-    image: supabase/studio:20231123-64a766a
+    image: supabase/studio:20231123-64a766a@sha256:393669f03b739fa5f196a5a0254442d224c439acff3ebe738cb27847d5fc207d
    restart: unless-stopped
    healthcheck:
      test:
@ -141,7 +141,7 @@ services:

  kong:
    container_name: supabase-kong
-    image: kong:2.8.1
+    image: kong:2.8.1@sha256:1b53405d8680a09d6f44494b7990bf7da2ea43f84a258c59717d4539abf09f6d
    restart: unless-stopped
    # https://unix.stackexchange.com/a/294837
    entrypoint: bash -c 'eval "echo \"$$(cat ~/temp.yml)\"" > ~/kong.yml && /docker-entrypoint.sh kong docker-start'
@ -169,7 +169,7 @@ services:

  auth:
    container_name: supabase-auth
-    image: supabase/gotrue:v2.99.0
+    image: supabase/gotrue:v2.99.0@sha256:b503f1fac70544bb5a43d4507e6a0842dc119e4937647b1e7ade34eae7dcdbf0
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -228,7 +228,7 @@ services:

  rest:
    container_name: supabase-rest
-    image: postgrest/postgrest:v11.2.2
+    image: postgrest/postgrest:v11.2.2@sha256:23b2dabfc7f3f1a6c11b71f2ce277191659da38ab76042a30c3c8d6c4e07b446
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -249,7 +249,7 @@ services:
  realtime:
    # This container name looks inconsistent but is correct because realtime constructs tenant id by parsing the subdomain
    container_name: realtime-dev.supabase-realtime
-    image: supabase/realtime:v2.25.35
+    image: supabase/realtime:v2.25.35@sha256:634a59e298fbd012523fbc874f74a18f2ae8523b11c646a2b4052b9b943c2939
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -289,7 +289,7 @@ services:

  storage:
    container_name: supabase-storage
-    image: supabase/storage-api:v0.43.11
+    image: supabase/storage-api:v0.43.11@sha256:2cd146f1af313019f0d03e18383e46578e7cb118bc5baa1fb7551ab56c0cb60e
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -332,7 +332,7 @@ services:

  imgproxy:
    container_name: supabase-imgproxy
-    image: darthsim/imgproxy:v3.8.0
+    image: darthsim/imgproxy:v3.8.0@sha256:0facd355d50f3be665ebe674486f2b2e9cdaebd3f74404acd9b7fece2f661435
    healthcheck:
      test: [ "CMD", "imgproxy", "health" ]
      timeout: 5s
@ -348,7 +348,7 @@ services:

  meta:
    container_name: supabase-meta
-    image: supabase/postgres-meta:v0.68.0
+    image: supabase/postgres-meta:v0.68.0@sha256:31a107dcfe9257792b49f560a5527d5fbd7128b986acad5431b269bac4d17f12
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -366,7 +366,7 @@ services:

  functions:
    container_name: supabase-edge-functions
-    image: supabase/edge-runtime:v1.22.4
+    image: supabase/edge-runtime:v1.22.4@sha256:4e02aacd0c8fa7ab103d718e4a0ece11d7d8a9446299f523d8ac5d092fec4908
    restart: unless-stopped
    depends_on:
      analytics:
@ -388,7 +388,7 @@ services:

  analytics:
    container_name: supabase-analytics
-    image: supabase/logflare:1.4.0
+    image: supabase/logflare:1.4.0@sha256:e693c787ffe1ae17b6e4e920a3cdd212416d3e1f97e1bd7cb5b67de0abbb0264
    healthcheck:
      test: [ "CMD", "curl", "http://localhost:4000/health" ]
      timeout: 5s
@ -439,7 +439,7 @@ services:
  # Comment out everything below this point if you are using an external Postgres database
  db:
    container_name: supabase-db
-    image: supabase/postgres:15.1.0.136
+    image: supabase/postgres:15.1.0.136@sha256:fb8387fddbb6dd2fc8af512bfb721a02786e0d71ded364ed66d096574e70d81e
    healthcheck:
      test: pg_isready -U postgres -h localhost
      interval: 5s
@ -484,7 +484,7 @@ services:

  vector:
    container_name: supabase-vector
-    image: timberio/vector:0.28.1-alpine
+    image: timberio/vector:0.28.1-alpine@sha256:4bc04aca94a44f04b427a490f346e7397ef7ce61fe589d718f744f7d92cb5c80
    healthcheck:
      test:
        [
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@ -31,7 +31,7 @@ services:
      - 5678:5678 # debug port

  redis:
-    image: redis:latest
+    image: redis:latest@sha256:a7cee7c8178ff9b5297cb109e6240f5072cdaaafd775ce6b586c3c704b06458e
    container_name: redis
    restart: always
    ports:
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -55,7 +55,7 @@ services:
      - 5050:5050

  redis:
-    image: redis:latest
+    image: redis:latest@sha256:a7cee7c8178ff9b5297cb109e6240f5072cdaaafd775ce6b586c3c704b06458e
    container_name: redis
    restart: always
    ports:
@ -113,7 +113,7 @@ services:

  studio:
    container_name: supabase-studio
-    image: supabase/studio:20231123-64a766a
+    image: supabase/studio:20231123-64a766a@sha256:393669f03b739fa5f196a5a0254442d224c439acff3ebe738cb27847d5fc207d
    restart: unless-stopped
    healthcheck:
      test:
@ -151,7 +151,7 @@ services:

  kong:
    container_name: supabase-kong
-    image: kong:2.8.1
+    image: kong:2.8.1@sha256:1b53405d8680a09d6f44494b7990bf7da2ea43f84a258c59717d4539abf09f6d
    restart: unless-stopped
    # https://unix.stackexchange.com/a/294837
    entrypoint: bash -c 'eval "echo \"$$(cat ~/temp.yml)\"" > ~/kong.yml && /docker-entrypoint.sh kong docker-start'
@ -179,7 +179,7 @@ services:

  auth:
    container_name: supabase-auth
-    image: supabase/gotrue:v2.99.0
+    image: supabase/gotrue:v2.99.0@sha256:b503f1fac70544bb5a43d4507e6a0842dc119e4937647b1e7ade34eae7dcdbf0
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -238,7 +238,7 @@ services:

  rest:
    container_name: supabase-rest
-    image: postgrest/postgrest:v11.2.2
+    image: postgrest/postgrest:v11.2.2@sha256:23b2dabfc7f3f1a6c11b71f2ce277191659da38ab76042a30c3c8d6c4e07b446
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -259,7 +259,7 @@ services:
  realtime:
    # This container name looks inconsistent but is correct because realtime constructs tenant id by parsing the subdomain
    container_name: realtime-dev.supabase-realtime
-    image: supabase/realtime:v2.25.35
+    image: supabase/realtime:v2.25.35@sha256:634a59e298fbd012523fbc874f74a18f2ae8523b11c646a2b4052b9b943c2939
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -299,7 +299,7 @@ services:

  storage:
    container_name: supabase-storage
-    image: supabase/storage-api:v0.43.11
+    image: supabase/storage-api:v0.43.11@sha256:2cd146f1af313019f0d03e18383e46578e7cb118bc5baa1fb7551ab56c0cb60e
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -342,7 +342,7 @@ services:

  imgproxy:
    container_name: supabase-imgproxy
-    image: darthsim/imgproxy:v3.8.0
+    image: darthsim/imgproxy:v3.8.0@sha256:0facd355d50f3be665ebe674486f2b2e9cdaebd3f74404acd9b7fece2f661435
    healthcheck:
      test: [ "CMD", "imgproxy", "health" ]
      timeout: 5s
@ -358,7 +358,7 @@ services:

  meta:
    container_name: supabase-meta
-    image: supabase/postgres-meta:v0.68.0
+    image: supabase/postgres-meta:v0.68.0@sha256:31a107dcfe9257792b49f560a5527d5fbd7128b986acad5431b269bac4d17f12
    depends_on:
      db:
        # Disable this if you are using an external Postgres database
@ -376,7 +376,7 @@ services:

  functions:
    container_name: supabase-edge-functions
-    image: supabase/edge-runtime:v1.22.4
+    image: supabase/edge-runtime:v1.22.4@sha256:4e02aacd0c8fa7ab103d718e4a0ece11d7d8a9446299f523d8ac5d092fec4908
    restart: unless-stopped
    depends_on:
      analytics:
@ -398,7 +398,7 @@ services:

  analytics:
    container_name: supabase-analytics
-    image: supabase/logflare:1.4.0
+    image: supabase/logflare:1.4.0@sha256:e693c787ffe1ae17b6e4e920a3cdd212416d3e1f97e1bd7cb5b67de0abbb0264
    healthcheck:
      test: [ "CMD", "curl", "http://localhost:4000/health" ]
      timeout: 5s
@ -449,7 +449,7 @@ services:
  # Comment out everything below this point if you are using an external Postgres database
  db:
    container_name: supabase-db
-    image: supabase/postgres:15.1.0.136
+    image: supabase/postgres:15.1.0.136@sha256:fb8387fddbb6dd2fc8af512bfb721a02786e0d71ded364ed66d096574e70d81e
    healthcheck:
      test: pg_isready -U postgres -h localhost
      interval: 5s
@ -494,7 +494,7 @@ services:

  vector:
    container_name: supabase-vector
-    image: timberio/vector:0.28.1-alpine
+    image: timberio/vector:0.28.1-alpine@sha256:4bc04aca94a44f04b427a490f346e7397ef7ce61fe589d718f744f7d92cb5c80
    healthcheck:
      test:
        [