chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/dockerfile	syntax	pinDigest	→ 0adf442
mcr.microsoft.com/devcontainers/typescript-node	image	pinDigest	→ 7f4046f

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

This PR improves build/dev-environment reproducibility by pinning the Dockerfile frontend and the devcontainer base image to immutable SHA256 digests, preventing upstream tag movement from changing results unexpectedly.

Changes:

• Pin docker/dockerfile:1.25 syntax frontend to a specific digest in Dockerfile.
• Pin the devcontainer base image mcr.microsoft.com/devcontainers/typescript-node:24-bookworm to a specific digest in .devcontainer.json.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
Dockerfile	Pins the Dockerfile frontend (# syntax=...) digest for reproducible builds.
.devcontainer.json	Pins the devcontainer image digest to ensure consistent local dev environments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.