From 2e13cd8f4f58971804224e54f49a3ee1069f0225 Mon Sep 17 00:00:00 2001
From: "renovate-update-app[bot]"
 <291053684+renovate-update-app[bot]@users.noreply.github.com>
Date: Tue, 20 Oct 2026 14:22:31 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/ci.yml | 2 +-
 BCI.dockerfile           | 4 ++--
 Dockerfile               | 2 +-
 docker-compose.yaml      | 6 +++---
 test-server/Dockerfile   | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 405c65f8..5f8abc39 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -282,7 +282,7 @@ jobs:
           description: Process agent collecting per-process and per-container telemetry for SUSE Observability.
           component: stackstate-k8s-process-agent
           dockerfile: BCI.dockerfile
-          base-name: registry.suse.com/bci/bci-micro:15.7-61.16@sha256:62a5e3d2574139c4334217e2f342960e3c03ac8b8c7a956504829e4cd79d9e97
+          base-name: registry.suse.com/bci/bci-micro:15.7@sha256:62a5e3d2574139c4334217e2f342960e3c03ac8b8c7a956504829e4cd79d9e97
 
       - name: Build, publish, and sign architecture image
         uses: StackVista/image-pipeline/.github/actions/push-single-arch@6284a6fc006a7cc46a7f00d02c50d5f21b117b63
diff --git a/BCI.dockerfile b/BCI.dockerfile
index 67d6f3e9..420d806d 100644
--- a/BCI.dockerfile
+++ b/BCI.dockerfile
@@ -1,11 +1,11 @@
-FROM registry.suse.com/bci/bci-micro:15.7-61.16@sha256:62a5e3d2574139c4334217e2f342960e3c03ac8b8c7a956504829e4cd79d9e97 AS final
+FROM registry.suse.com/bci/bci-micro:15.7@sha256:62a5e3d2574139c4334217e2f342960e3c03ac8b8c7a956504829e4cd79d9e97 AS final
 ARG LONG_ARCH="x86_64"
 ARG SHORT_ARCH="amd64"
 ARG EBPF_SUBFOLDER="x86_64"
 RUN : # No-op command to create an explicit layer - this fixes a weird buildkit/buildx bug on macos arm
 
 # Temporary build stage image
-FROM registry.suse.com/bci/bci-base:15.7-5.23.49@sha256:b9d19a145a6a7832291fcaf354c61b9d229e38dc4b47ea90e885d9dc02079beb AS chroot-builder
+FROM registry.suse.com/bci/bci-base:15.7@sha256:b9d19a145a6a7832291fcaf354c61b9d229e38dc4b47ea90e885d9dc02079beb AS chroot-builder
 # Install system packages using builder image that has zypper
 COPY --from=final / /chroot/
 
diff --git a/Dockerfile b/Dockerfile
index 7b94d57f..937a292f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # Actual docker image construction #
 ####################################
 
-FROM ubuntu:jammy-20230308
+FROM ubuntu:jammy-20260930@sha256:0a9887931b0e38af2e3487ed39e29436b0535c4f3f52e57745baaf79d1898956
 LABEL maintainer="StackState <info@stackstate.com>"
 ARG LONG_ARCH="x86_64"
 ARG SHORT_ARCH="amd64"
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 245e455b..f66c5492 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -3,7 +3,7 @@ version: '2.4'
 
 services:
   zookeeper:
-    image: quay.io/stackstate/zookeeper:3.6.1-focal-20210827-r37
+    image: quay.io/stackstate/zookeeper:3.6.1-focal-20210827-r37@sha256:f24f7fffb48918c27684b5a53eb3feff294c92c35bd606645fb497be3e609522
     ports:
       - 2181:2181
     mem_limit: 1G
@@ -16,7 +16,7 @@ services:
       retries: 3
 
   kafka:
-    image: quay.io/stackstate/kafka:2.8.1-focal-20210827-r90.20220103.1605
+    image: quay.io/stackstate/kafka:2.8.1-focal-20210827-r90.20220103.1605@sha256:a9a2649249bd3959e7edeffe12aea6d100bf4d93b348e1bfa95fb7fab3501489
     user: root
     ports:
       - 9092:9092
@@ -78,7 +78,7 @@ services:
     mem_limit: 1G
 
   simulator:
-    image: "stackstate/simulator:latest"
+    image: "stackstate/simulator:latest@sha256:3b2bc3009b5ecd9b3c8a75a05fb0dfb4133f4e09f1aa1574289a403f6968f854"
     ports:
       - 7078:7078
     entrypoint: record -p 7078 -t tpl.json
diff --git a/test-server/Dockerfile b/test-server/Dockerfile
index 4a2a6019..9089907d 100644
--- a/test-server/Dockerfile
+++ b/test-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:24.04
+FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
 
 COPY main /
 COPY config.json /