From 9f29ba8d892cd7ea44adb286cc9bcfa887b65e10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Henrik=20H=C3=BCttemann?= <henrik.huettemann@verdigado.com>
Date: Fri, 22 Sep 2023 14:49:03 +0200
Subject: [PATCH] Pin package versions

---
 Dockerfile | 29 ++++++++++++++++++++++-------
 1 file changed, 22 insertions(+), 7 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index cba46cf..bb58fb7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,15 +1,30 @@
 FROM python:3.11.5-alpine3.17
 COPY --from=koalaman/shellcheck:v0.9.0 /bin/shellcheck /bin/
 
+# renovate: datasource=repology depName=alpine_edge/build-base versioning=loose
+ENV BUILD_BASE_VERSION="0.5"
+# renovate: datasource=repology depName=alpine_edge/gcc versioning=loose
+ENV GCC_VERSION="13.2.0"
+# renovate: datasource=repology depName=alpine_edge/ruby versioning=loose
+ENV RUBY_VERSION="3.2.2"
+# renovate: datasource=repology depName=alpine_edge/git versioning=loose
+ENV GIT_VERSION="2.42.0"
+# renovate: datasource=repology depName=alpine_edge/openssh-keygen versioning=loose
+ENV OPENSSH_KEYGEN_VERSION="9.4_p1-r0"
+# renovate: datasource=pypi depName=pre-commit versioning=pep440
+ENV PRE_COMMIT_VERSION="3.3.3"
+# renovate: datasource=rubygems depName=mdl versioning=ruby
+ENV MDL_VERSION="13.2.0"
+
 RUN apk add --update --no-cache \
-      build-base \
-      gcc \
-      ruby \
-      git \
-      openssh-keygen \
+      build-base="${BUILD_BASE_VERSION}" \
+      gcc="${GCC_VERSION}" \
+      ruby="${RUBY_VERSION}" \
+      git="${GIT_VERSION}" \
+      openssh-keygen="${OPENSSH_KEYGEN_VERSION}" \
     && \
-    pip install --no-cache-dir pre-commit && \
-    gem install --no-document mdl && \
+    pip install --no-cache-dir pre-commit=="${PRE_COMMIT_VERSION}" && \
+    gem install --no-document mdl -v "${MDL_VERSION}" && \
     mkdir /data && \
     adduser -D -g user user