From 3a5acb0a41593458608f31c5b2c1d9e1c071fad0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 15 Oct 2025 09:29:17 +0000
Subject: [PATCH] Update docker

---
 .github/workflows/publish-release-element-module.yml | 12 ++++++------
 .github/workflows/publish-release-synapse-module.yml | 10 +++++-----
 .github/workflows/synapse-module.yml                 |  8 ++++----
 3 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/publish-release-element-module.yml b/.github/workflows/publish-release-element-module.yml
index 2e5c09f..fad485e 100644
--- a/.github/workflows/publish-release-element-module.yml
+++ b/.github/workflows/publish-release-element-module.yml
@@ -25,7 +25,7 @@ jobs:
 
             - name: Generate Docker metadata of the existing image
               id: meta
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
               with:
                   bake-target: docker-metadata-action
                   flavor: |
@@ -39,7 +39,7 @@ jobs:
 
             - name: Login to ghcr.io
               if: github.event_name != 'pull_request'
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
@@ -47,7 +47,7 @@ jobs:
 
             - name: Login to registry.opencode.de
               if: github.event_name != 'pull_request'
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: registry.opencode.de
                   username: ${{ vars.DOCKER_OPENCODE_USERNAME }}
@@ -58,11 +58,11 @@ jobs:
               uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Build
               id: bake-load
-              uses: docker/bake-action@v6.3.0
+              uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
               with:
                   load: true
                   files: |
@@ -103,7 +103,7 @@ jobs:
 
             - name: Push
               id: bake-push
-              uses: docker/bake-action@v6.3.0
+              uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
               if: github.event_name != 'pull_request'
               with:
                   push: true
diff --git a/.github/workflows/publish-release-synapse-module.yml b/.github/workflows/publish-release-synapse-module.yml
index b32822c..b514883 100644
--- a/.github/workflows/publish-release-synapse-module.yml
+++ b/.github/workflows/publish-release-synapse-module.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Generate Docker metadata of the existing image
               id: meta-existing-tag
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
               with:
                   images: ${{ env.DOCKER_IMAGE }}
                   tags: |
@@ -29,7 +29,7 @@ jobs:
 
             - name: Generate Docker metadata of the new image
               id: meta-new-tags
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
               with:
                   images: ${{ env.DOCKER_IMAGE }}
                   labels: |
@@ -46,7 +46,7 @@ jobs:
                   echo "FROM $SOURCE_IMAGE" > Dockerfile
 
             - name: Login to ghcr.io
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
@@ -56,11 +56,11 @@ jobs:
               uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Build and push
               id: build_and_push
-              uses: docker/build-push-action@v6
+              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
               with:
                   push: true
                   context: .
diff --git a/.github/workflows/synapse-module.yml b/.github/workflows/synapse-module.yml
index b3f9891..c7f5b80 100644
--- a/.github/workflows/synapse-module.yml
+++ b/.github/workflows/synapse-module.yml
@@ -20,18 +20,18 @@ jobs:
             - uses: actions/checkout@v4
 
             - name: Login to ghcr.io
-              uses: docker/login-action@v3
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
                   password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
             - name: Generate Docker metadata
               id: meta
-              uses: docker/metadata-action@v5
+              uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
               env:
                   DOCKER_METADATA_PR_HEAD_SHA: true
               with:
@@ -44,7 +44,7 @@ jobs:
                       type=sha,prefix=
 
             - name: Docker build and push
-              uses: docker/build-push-action@v6
+              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
               id: dockerBuild
               with:
                   push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}