build(deps): pin dependencies

Dockerfile

@@ -1,12 +1,12 @@
-FROM ghcr.io/astral-sh/uv:debian-slim AS build
+FROM ghcr.io/astral-sh/uv:debian-slim@sha256:3ac4e2ef46fd5a0fb0cf5af9a421435513fec1b2a66e1379a7981dc03470fd33 AS build
 
 WORKDIR /app
 
 COPY uv.lock pyproject.toml ./
 
 RUN uv export --no-group dev --frozen --no-emit-project > /app/requirements.txt
 
-FROM python:3.10-slim
+FROM python:3.10-slim@sha256:66aad90b231f011cb80e1966e03526a7175f0586724981969b23903abac19081
 
 ENV PIP_ROOT_USER_ACTION=ignore
 WORKDIR /app

pyproject.toml

@@ -3,30 +3,30 @@ name = "project"
 version = "0"
 requires-python = "~=3.10"
 dependencies = [
-    'asyncpg>=0',
-    'httpx[http2]>=0',
-    'jinja2>=0',
+    'asyncpg==0.30.0',
+    'httpx[http2]==0.28.1',
+    'jinja2==3.1.5',
     'sslog==0.0.0a52',
     'litestar[jinja]==2.14.0',
     'redis[hiredis]',
-    'uvicorn>=0',
-    'bgm-tv-wiki>=0',
-    'pyyaml>=0',
-    'msgspec>=0',
-    'google-re2>=0',
-    'httptools>=0',
-    'uvloop>=0 ; sys_platform != "win32"',
+    'uvicorn==0.34.0',
+    'bgm-tv-wiki==0.0.30',
+    'pyyaml==6.0.2',
+    'msgspec==0.19.0',
+    'google-re2==1.1.20240702',
+    'httptools==0.6.4',
+    'uvloop==0.21.0; sys_platform != "win32"',
 ]
 
 [dependency-groups]
 dev = [
-    'mypy ~= 1.14.1',
-    'pytest ~= 8.3.4',
-    'pre-commit ~= 4.0.1',
-    'asyncpg-stubs ~= 0.30.0',
-    'types-redis ~= 4.6.0.20240806',
-    'types-pyyaml ~= 6.0.12.20240917',
-    'google-re2-stubs ~= 0.1.1',
+    'mypy ==1.14.1',
+    'pytest ==8.3.4',
+    'pre-commit ==4.0.1',
+    'asyncpg-stubs ==0.30.0',
+    'types-redis ==4.6.0.20241004',
+    'types-pyyaml ==6.0.12.20241230',
+    'google-re2-stubs ==0.1.1',
 ]
 
 [tool.uv]