Pin package versions

Dockerfile

@@ -1,15 +1,30 @@
 FROM python:3.11.5-alpine3.17
 COPY --from=koalaman/shellcheck:v0.9.0 /bin/shellcheck /bin/
 
+# renovate: datasource=repology depName=alpine_edge/build-base versioning=loose
+ENV BUILD_BASE_VERSION="0.5"
+# renovate: datasource=repology depName=alpine_edge/gcc versioning=loose
+ENV GCC_VERSION="13.2.0"
+# renovate: datasource=repology depName=alpine_edge/ruby versioning=loose
+ENV RUBY_VERSION="3.2.2"
+# renovate: datasource=repology depName=alpine_edge/git versioning=loose
+ENV GIT_VERSION="2.42.0"
+# renovate: datasource=repology depName=alpine_edge/openssh-keygen versioning=loose
+ENV OPENSSH_KEYGEN_VERSION="9.4_p1-r0"
+# renovate: datasource=pypi depName=pre-commit versioning=pep440
+ENV PRE_COMMIT_VERSION="3.3.3"
+# renovate: datasource=rubygems depName=mdl versioning=ruby
+ENV MDL_VERSION="13.2.0"
+
 RUN apk add --update --no-cache \
-      build-base \
-      gcc \
-      ruby \
-      git \
-      openssh-keygen \
+      build-base="${BUILD_BASE_VERSION}" \
+      gcc="${GCC_VERSION}" \
+      ruby="${RUBY_VERSION}" \
+      git="${GIT_VERSION}" \
+      openssh-keygen="${OPENSSH_KEYGEN_VERSION}" \
     && \
-    pip install --no-cache-dir pre-commit && \
-    gem install --no-document mdl && \
+    pip install --no-cache-dir pre-commit=="${PRE_COMMIT_VERSION}" && \
+    gem install --no-document mdl -v "${MDL_VERSION}" && \
     mkdir /data && \
     adduser -D -g user user