[DOCS]: Pin MathJax npm install with commit hash.

[MacOS]

This PR pins the npm package installations of MathJax in the Dockerfile used in the docs directory with their commit hash to increase security (#847).

The OpenSSF Score should increase after this PR has been merged.

[Copilot]

Pull request overview

Pins the MathJax asset pre-download in the docs Antora Docker image to a specific Git commit, aiming to improve supply-chain security and OpenSSF scoring as described in #847.

Changes:

• Replace npm pack mathjax@3 with npm pack git+https://github.com/mathjax/MathJax.git#<commit> to pin the download to a specific commit.
• Document the pinned MathJax commit in the Dockerfile comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[MacOS]

Good catch, addressed with 5efe666

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[MacOS]

@michalharakal Should we addresse this?

[MacOS]

I switched from the long commit hash to the short form because the long commit form caused the error npm error GitFetcher requires an Arborist constructor to pack a tarball. See run https://github.com/SKaiNET-developers/SKaiNET/actions/runs/30253624459/job/89937067552?pr=889, and issue npm/cli#6723 where the fix was proposed.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

docs/.docker/Dockerfile:89

• npm pack is pinned only by a 7‑char short SHA (#600692a), which can become ambiguous over time, and the subsequent tar -xzf /tmp/mathjax-*.tgz still relies on a wildcard that can match multiple files and break the build. Use the full commit hash in the git URL and capture the exact tarball filename emitted by npm pack so extraction is deterministic and robust.

    && npm pack git+https://github.com/mathjax/MathJax.git#600692a --pack-destination /tmp \
    && tar -xzf /tmp/mathjax-*.tgz -C /tmp \

[michalharakal]

Thank you @MacOS