diff --git a/.woodpecker/.workflow.yml b/.woodpecker/.workflow.yml
index f979367..eb7320f 100644
--- a/.woodpecker/.workflow.yml
+++ b/.woodpecker/.workflow.yml
@@ -7,7 +7,7 @@ steps:
     when:
       - event: [tag, manual, push, pull_request]
         branch: main
-    image: docker
+    image: docker@sha256:d003717ad7a27d359dd2f5f6aa6ca691f5f58671e8d1ff0277d07e5635bb8332
     environment:
       DOCKER_USERNAME:
         from_secret: docker_public_username
diff --git a/Dockerfile b/Dockerfile
index e86a478..0d56da5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,11 @@
 # Build stage of the application
-FROM oven/bun AS build
+FROM oven/bun@sha256:fbf8e67e9d3b806c86be7a2f2e9bae801f2d9212a21db4dcf8cc9889f5a3c9c4 AS build
 WORKDIR /app
 COPY . .
 RUN  bun i && bun run build
 
 # Production stage to run the application
-FROM cgr.dev/chainguard/nginx AS production
+FROM cgr.dev/chainguard/nginx@sha256:50b986b188c26457d060c9e16665b51d2e5e252019ba4e921cb990c71cd24802 AS production
 COPY --from=build /app/dist /usr/share/nginx/html
 EXPOSE 8080
 ENTRYPOINT ["nginx", "-g", "daemon off;"]
\ No newline at end of file
diff --git a/package.json b/package.json
index 52745e2..1f1dce6 100644
--- a/package.json
+++ b/package.json
@@ -12,10 +12,10 @@
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@rsbuild/core": "^1.1.8",
-    "@rsbuild/plugin-react": "^1.0.7",
+    "@rsbuild/core": "1.6.8",
+    "@rsbuild/plugin-react": "1.4.2",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
-    "typescript": "^5.7.2"
+    "typescript": "5.9.3"
   }
 }