chore(deps): pin dependencies

.gitea/workflows/artifacthub-metadata.yaml

@@ -10,13 +10,13 @@ jobs:
     name: "Upload artifacthub-repo.yml to OCI registry"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
     - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: oras-project/setup-oras@v2.0.0
+    - uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0
       with:
         version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
     - name: Extract meta information

Dockerfile

@@ -1,6 +1,6 @@
 FROM docker.io/library/ubuntu:26.04 AS download
 
-ARG DC_VERSION=v5.3.0
+ARG DC_VERSION=v5.3.1
 
 RUN NAME=docker-compose-$(uname | tr [:upper:] [:lower:])-$(uname -m); \
     apt update --yes && \
@@ -19,7 +19,7 @@ RUN NAME=docker-compose-$(uname | tr [:upper:] [:lower:])-$(uname -m); \
 
 FROM scratch
 
-ARG DC_VERSION=v5.3.0
+ARG DC_VERSION=v5.3.1
 ARG BUILD_DATE
 
 LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/docker/compose/refs/tags/${DC_VERSION}/README.md" \

README.md

@@ -11,7 +11,7 @@ The workflow or how `docker-compose` can in general be used is documented at
 image.
 
 ```bash
-IMAGE_VERSION=5.3.0
+IMAGE_VERSION=5.3.1
 docker run \
   --rm \
   --volume "$(pwd):$(pwd)" \