chore(deps): pin dependencies

| datasource | package        | from  | to    |
| ---------- | -------------- | ----- | ----- |
| npm        | @biomejs/biome | 2.2.4 | 2.2.4 |
| npm        | biome          | 0.3.3 | 0.3.3 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/build_and_test_no_docker.yaml

@@ -20,12 +20,12 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
 
       - name: Setup Goimports
         run: go install golang.org/x/tools/cmd/goimports@latest
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24-bullseye AS fe-builder
+FROM node:24-bullseye@sha256:43e30d1e835ced0b0f351b86d9c282500adf1f51688808408b9cae8cc3978833 AS fe-builder
 
 WORKDIR /app/pkg/web
 COPY pkg/web ./