chore(deps): pin versions and setup dependabot for Dockerfile (#21)

.github/dependabot.yml

@@ -14,3 +14,9 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10

Dockerfile

@@ -1,7 +1,7 @@
 ARG BUILD_IMAGE=ghcr.io/arlind-dev/sulej.ch:build-latest
 FROM --platform=$BUILDPLATFORM ${BUILD_IMAGE} AS build
 
-FROM nginx:alpine
+FROM nginx:1.29.2-alpine3.22
 
 ARG BUILD_IMAGE
 
@@ -9,4 +9,4 @@ WORKDIR /usr/share/nginx/html
 COPY --from=build /output ./
 
 EXPOSE 80
-CMD ["nginx", "-g", "daemon off;"]
+CMD ["nginx", "-g", "daemon off;"]

Dockerfile.build

@@ -1,8 +1,9 @@
-FROM node:alpine AS build
+FROM node:22.11.0-alpine3.20 AS build
 
 WORKDIR /app
 
-RUN npm install -g --force corepack && corepack enable && corepack prepare pnpm@latest --activate
+RUN npm install -g --force corepack \
+	&& corepack enable
 
 COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile