chore(deps): pin dependencies

.woodpecker/build.yml

@@ -5,13 +5,13 @@ when:
 steps:
   # use vendor to cache dependencies
   vendor:
-    image: golang:1.25
+    image: golang:1.25@sha256:dd08f769578a5f51a22bf6a81109288e23cfe2211f051a5c29bd1c05ad3db52a
     commands:
       - go mod vendor
 
   build:
     depends_on: vendor
-    image: codeberg.org/6543/docker-images/golang_just:go-1.24
+    image: codeberg.org/6543/docker-images/golang_just:go-1.24@sha256:d0aa58958590b955daac1d6991572b5a4dacf07ed6efa685e420eec98a080b04
     commands:
       - go version
       - just build
@@ -20,7 +20,7 @@ steps:
 
   docker-dryrun:
     depends_on: vendor
-    image: woodpeckerci/plugin-docker-buildx:6.0.2
+    image: woodpeckerci/plugin-docker-buildx:6.0.2@sha256:82f90f336084c320c37970aa1cae8e8bf8a54a5b63f80093dd80dc2bb181b6ab
     settings:
       dockerfile: Dockerfile
       platforms: linux/amd64
@@ -32,7 +32,7 @@ steps:
 
   build-tag:
     depends_on: vendor
-    image: codeberg.org/6543/docker-images/golang_just:go-1.24
+    image: codeberg.org/6543/docker-images/golang_just:go-1.24@sha256:d0aa58958590b955daac1d6991572b5a4dacf07ed6efa685e420eec98a080b04
     commands:
       - go version
       - just build-tag ${CI_COMMIT_TAG##v}
@@ -41,7 +41,7 @@ steps:
 
   test:
     depends_on: build
-    image: codeberg.org/6543/docker-images/golang_just:go-1.24
+    image: codeberg.org/6543/docker-images/golang_just:go-1.24@sha256:d0aa58958590b955daac1d6991572b5a4dacf07ed6efa685e420eec98a080b04
     commands:
       - just test
     when:
@@ -50,7 +50,7 @@ steps:
   integration-tests:
     failure: ignore
     depends_on: build
-    image: codeberg.org/6543/docker-images/golang_just:go-1.24
+    image: codeberg.org/6543/docker-images/golang_just:go-1.24@sha256:d0aa58958590b955daac1d6991572b5a4dacf07ed6efa685e420eec98a080b04
     commands:
       - just integration
     environment:
@@ -63,7 +63,7 @@ steps:
 
   release:
     depends_on: build
-    image: woodpeckerci/plugin-release:0.2.6
+    image: woodpeckerci/plugin-release:0.2.6@sha256:4a1eb273b61b162345d875d52ef1d788f69b2d829820a715d9c67b3e19e32387
     settings:
       base_url: https://codeberg.org
       file_exists: overwrite
@@ -75,7 +75,7 @@ steps:
 
   docker-next:
     depends_on: vendor
-    image: woodpeckerci/plugin-docker-buildx:6.0.2
+    image: woodpeckerci/plugin-docker-buildx:6.0.2@sha256:82f90f336084c320c37970aa1cae8e8bf8a54a5b63f80093dd80dc2bb181b6ab
     settings:
       registry: codeberg.org
       dockerfile: Dockerfile
@@ -90,7 +90,7 @@ steps:
       - event: [push]
 
   'Publish PR image':
-    image: woodpeckerci/plugin-docker-buildx:6.0.2
+    image: woodpeckerci/plugin-docker-buildx:6.0.2@sha256:82f90f336084c320c37970aa1cae8e8bf8a54a5b63f80093dd80dc2bb181b6ab
     depends_on: test
     settings:
       registry: codeberg.org
@@ -108,7 +108,7 @@ steps:
 
   docker-release:
     depends_on: vendor
-    image: woodpeckerci/plugin-docker-buildx:6.0.2
+    image: woodpeckerci/plugin-docker-buildx:6.0.2@sha256:82f90f336084c320c37970aa1cae8e8bf8a54a5b63f80093dd80dc2bb181b6ab
     settings:
       registry: codeberg.org
       dockerfile: Dockerfile

.woodpecker/lint.yml

@@ -6,7 +6,7 @@ when:
 steps:
   lint:
     depends_on: []
-    image: golangci/golangci-lint:v1.64.8
+    image: golangci/golangci-lint:v1.64.8@sha256:2987913e27f4eca9c8a39129d2c7bc1e74fbcf77f181e01cea607be437aa5cb8
     commands:
       - go version
       - go install mvdan.cc/gofumpt@latest
@@ -15,7 +15,7 @@ steps:
 
   editor-config:
     depends_on: []
-    image: mstruebing/editorconfig-checker:v3.4.1
+    image: mstruebing/editorconfig-checker:v3.4.1@sha256:82d21efc10bbb6a2d029ab9d7cafa7ab0e49250143a75c3ab605a0a28ff8e5ad
 
   yamllint:
     image: pipelinecomponents/yamllint:0.35.6@sha256:a6fb6f8699863de37f3292cd8dcc9c875dae652dfd23793b6343a247894e2d63
@@ -24,7 +24,7 @@ steps:
       - yamllint .
 
   prettier:
-    image: docker.io/woodpeckerci/plugin-prettier:1.4.0
+    image: docker.io/woodpeckerci/plugin-prettier:1.4.0@sha256:2ba669e1e8192a1cf14a6716600371485ffc2e9cd80da44948b0d50b91415a23
     depends_on: []
     settings:
       version: 3.2.5

Dockerfile

@@ -1,5 +1,5 @@
 # Set the default Go version as a build argument
-ARG XGO="go-1.24.x"
+ARG XGO="go-1.24.x@sha256:8bcc7a783c13459d81ca81288d78dba4b1986da1e2e1cb2774358d7487250cf2"
 
 # Use xgo (a Go cross-compiler tool) as build image
 FROM --platform=$BUILDPLATFORM techknowlogick/xgo:${XGO} AS build