chore(docker): pin digests docker pin digests (#697)

* chore(docker): pin digests docker pin digests

* chore(release): remove dependencies on custom actions for commit

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Luca Corrieri <[email protected]>

Author: renovate[bot]

.github/workflows/release.yaml

@@ -8,6 +8,7 @@ on:
 permissions:
   contents: write
   packages: write
+  pull-requests: write
 
 jobs:
   goreleaser:
@@ -18,10 +19,6 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
-          token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-
-      - name: Fetch all tags
-        run: git fetch --force --tags
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -66,11 +63,16 @@ jobs:
           yq -i '.version = env(CHART_VERSION)' $CHART_PATH/Chart.yaml
           yq -i '.appVersion = env(APP_VERSION)' $CHART_PATH/Chart.yaml
 
-      - name: Commit version to repository
-        uses: stefanzweifel/git-auto-commit-action@v6
-        with:
-          commit_message: "chore(release): bump version to ${{ github.ref_name }}"
-          push_options: --force
+      - name: Commit version to repository and open PR
+        run: |
+          BRANCH_NAME="bump-version-${{ github.ref_name }}"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add .
+          git switch -c $BRANCH_NAME
+          git commit -m "chore(release): bump version to ${{ github.ref_name }}"
+          git push origin $BRANCH_NAME
+          gh pr create --fill --base main --head $BRANCH_NAME
 
   build-and-push:
     uses: ./.github/workflows/build-and-push.yaml

Dockerfile

@@ -2,7 +2,7 @@
 
 # Build Burrito UI
 
-FROM docker.io/library/node:22.19.0@sha256:6fe286835c595e53cdafc4889e9eff903dd3008a3050c1675809148d8e0df805 AS builder-ui
+FROM docker.io/library/node:22.19.0@sha256:afff6d8c97964a438d2e6a9c96509367e45d8bf93f790ad561a1eaea926303d9 AS builder-ui
 
 WORKDIR /workspace
 # Copy the node modules manifests
@@ -17,7 +17,7 @@ ENV VITE_API_BASE_URL=/api
 RUN yarn build
 
 # Build the manager binary
-FROM docker.io/library/golang:1.24.7-alpine@sha256:2bba76c152a3059724bac887e7a24749a0f9a62d49fe7dfa1bcae30ee877e109 AS builder
+FROM docker.io/library/golang:1.24.7-alpine@sha256:fc2cff6625f3c1c92e6c85938ac5bd09034ad0d4bc2dfb08278020b68540dbb5 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 ARG PACKAGE=github.com/padok-team/burrito