chore(renovate): add explicit dist dep annotations (#645)

bats/Dockerfile

 FROM bats/bats:1.2.1
 
 RUN set -x \
-    #
-    # Install
-    # - coreutils: For GNU mktemp since busybox mktemp doesn't support --tmpdir.
-    && apk add --update --no-cache coreutils=~8 \
-    #
-    # Install git to install extra
-    #
-    && apk add --update --no-cache --virtual .bats-deps git=~2 \
-    #
-    # Install extra bats dependencies
-    #
-    && git clone -b 'v0.3.0' --single-branch --depth 1 \
-      https://github.com/ztombol/bats-assert /usr/lib/bats-assert \
-    && git clone -b 'v0.2.0' --single-branch --depth 1 \
-      https://github.com/ztombol/bats-file /usr/lib/bats-file \
-    && git clone -b 'v0.3.0' --single-branch --depth 1 \
-      https://github.com/ztombol/bats-support /usr/lib/bats-support \
-    #
-    # Clean
-    #
-    && apk del .bats-deps \
-    ;
+  #
+  # Install
+  # - coreutils: For GNU mktemp since busybox mktemp doesn't support --tmpdir.
+  && apk add --update --no-cache \
+  # renovate: datasource=repology depName=alpine_3_13/coreutils versioning=loose
+  coreutils=="8.31-r0" \
+  #
+  # Install git to install extra
+  #
+  && apk add --update --no-cache --virtual .bats-deps \
+  # renovate: datasource=repology depName=alpine_3_13/git versioning=loose
+  git=="2.24.4-r0" \
+  #
+  # Install extra bats dependencies
+  #
+  && git clone -q -b 'v0.3.0' --single-branch --depth 1 \
+  https://github.com/ztombol/bats-assert /usr/lib/bats-assert \
+  && git clone -q -b 'v0.2.0' --single-branch --depth 1 \
+  https://github.com/ztombol/bats-file /usr/lib/bats-file \
+  && git clone -q -b 'v0.3.0' --single-branch --depth 1 \
+  https://github.com/ztombol/bats-support /usr/lib/bats-support \
+  #
+  # Clean
+  #
+  && apk del .bats-deps \
+  ;

curl/Dockerfile

 FROM alpine:3.13
 
-RUN apk --no-cache --update add curl=~7
+RUN apk --no-cache --update add \
+  # renovate: datasource=repology depName=alpine_3_13/curl versioning=loose
+  curl=="7.76.1-r0"

git-deploy/Dockerfile

-FROM python:3.8.3-alpine3.10
+FROM python:3.8.9-alpine3.13
 
 ## Install envsubst and curl
-RUN apk add --no-cache --update gettext-dev=~0 curl=~7
+RUN apk add --no-cache --update \
+  # renovate: datasource=repology depName=alpine_3_13/bash versioning=loose
+  bash=="5.1.0-r0" \
+  # renovate: datasource=repology depName=alpine_3_13/coreutils versioning=loose
+  coreutils=="8.32-r2" \
+  # renovate: datasource=repology depName=alpine_3_13/curl versioning=loose
+  curl=="7.76.1-r0" \
+  # renovate: datasource=repology depName=alpine_3_13/gettext versioning=loose
+  gettext=="0.20.2-r2"
 
 ## Copy git deployment scripts
 COPY ./bin /bin

kosko/Dockerfile

@@ -4,7 +4,7 @@ FROM ghcr.io/socialgouv/docker/kubectl:6.0 AS kubectl-image
 
 #
 
-FROM node:15-alpine
+FROM node:14.16.1-alpine3.13
 
 COPY --from=kubectl-image /usr/local/bin/kubectl /usr/local/bin/kubectl
 COPY --from=kubectl-image /usr/local/bin/kustomize /usr/local/bin/kustomize
@@ -14,13 +14,17 @@ ENV KOSKO_VERSION=${KOSKO_VERSION}
 
 RUN set -ex \
   #
-  && apk add --no-cache yq=~4 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community \
+  && apk add --update --no-cache \
+  # renovate: datasource=repology depName=alpine_3_13/yq versioning=loose
+  yq=="3.4.1-r0" \
   #
   && apk add --update --no-cache \
-  bash=~5 \
-  coreutils=~8 \
-  gettext=~0 \
-  jq=~1 \
+  # renovate: datasource=repology depName=alpine_3_13/bash versioning=loose
+  bash=="5.1.0-r0" \
+  # renovate: datasource=repology depName=alpine_3_13/coreutils versioning=loose
+  coreutils=="8.32-r2" \
+  # renovate: datasource=repology depName=alpine_3_13/gettext versioning=loose
+  gettext=="0.20.2-r2" \
   #
   && yarn global add kosko@${KOSKO_VERSION} \
   #

kubectl/Dockerfile

@@ -9,18 +9,22 @@ ARG KUSTOMIZE_VERSION=kustomize/v3.5.2
 RUN set -ex \
   #
   && apk add --update --no-cache \
-    bash=~5 \
-    coreutils=~8 \
-    gettext=~0 \
-    jq=~1 \
+  # renovate: datasource=repology depName=alpine_3_13/bash versioning=loose
+  bash=="5.1.0-r0" \
+  # renovate: datasource=repology depName=alpine_3_13/coreutils versioning=loose
+  coreutils=="8.32-r2" \
+  # renovate: datasource=repology depName=alpine_3_13/gettext versioning=loose
+  gettext=="0.20.2-r2" \
+  # renovate: datasource=repology depName=alpine_3_13/jq versioning=loose
+  jq=="1.6-r1" \
   #
   && wget -O /dev/shm/kubectl \
-    "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
+  "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
   && chmod +x /dev/shm/kubectl \
   && mv /dev/shm/kubectl /usr/local/bin/kubectl \
   #
   && wget -O /dev/shm/kustomize.tar \
-    "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION#kustomize/}/kustomize_${KUSTOMIZE_VERSION#kustomize/}_linux_amd64.tar.gz" \
+  "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION#kustomize/}/kustomize_${KUSTOMIZE_VERSION#kustomize/}_linux_amd64.tar.gz" \
   && tar xvzf /dev/shm/kustomize.tar  \
   && mv /kustomize /usr/local/bin/kustomize \
   ;

no-k8s/Dockerfile

 FROM ghcr.io/socialgouv/docker/kosko:6.0
 
-RUN apk add --update --no-cache git=~2
+RUN apk add --update --no-cache \
+  # renovate: datasource=repology depName=alpine_3_13/git versioning=loose
+  git=="2.24.4-r0"
 
 # renovate: datasource=github-tags depName=socialgouv/k8s
 ARG K8S_VERSION=v1.3.2
@@ -9,4 +11,5 @@ RUN git clone --depth 1 --branch ${K8S_VERSION} https://github.com/SocialGouv/k8
 WORKDIR /k8s/.k8s
 
 RUN --mount=type=cache,target=/k8s/.k8s/node_modules \
-  yarn install --frozen-lockfile --production && yarn cache clean
+  yarn install --frozen-lockfile --production \
+  && yarn cache clean

puppeteer/Dockerfile

-FROM alpine:3.13.5
+FROM alpine:3.13
 
 RUN --mount=type=cache,target=/var/cache/apk \
   apk add --no-cache \
-  chromium=~86.0.4240.111-r0 \
-  nss=~3.63-r1 \
-  freetype=~2.10.4-r1 \
-  freetype-dev=~2.10.4-r1 \
-  harfbuzz=~2.7.4-r1 \
-  ca-certificates=~20191127-r5 \
-  ttf-freefont=~20120503-r1 \
-  nodejs=~14.16.1-r1 \
-  yarn=~1.22.10-r0
+  # renovate: datasource=repology depName=alpine_3_13/ca-certificates versioning=loose
+  ca-certificates=="20191127-r5" \
+  # renovate: datasource=repology depName=alpine_3_13/chromium versioning=loose
+  chromium=="86.0.4240.111-r0" \
+  # renovate: datasource=repology depName=alpine_3_13/freetype-dev versioning=loose
+  freetype-dev=="2.10.4-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/freetype versioning=loose
+  freetype=="2.10.4-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/harfbuzz versioning=loose
+  harfbuzz=="2.7.4-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/nodejs versioning=loose
+  nodejs=="14.16.1-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/nss versioning=loose
+  nss=="3.63-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/ttf-freefont versioning=loose
+  ttf-freefont=="20120503-r1" \
+  # renovate: datasource=repology depName=alpine_3_13/yarn versioning=loose
+  yarn=="1.22.10-r0"
 
 # Tell Puppeteer to skip installing Chrome. We'll be using the installed package.
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD true