From 666cd3236bbabf18f06946a80852a5f0237b1bfc Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 06:29:46 +0000
Subject: [PATCH] chore(deps): pin
 mcr.microsoft.com/devcontainers/typescript-node docker tag to 0cbad76

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 .devcontainer/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 63b39859..d7ce254a 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -6,7 +6,7 @@
 # which downloads the 20 MB nanolayer binary and runs it as root to invoke a
 # second feature that runs exactly the apt call below -- more than twice the
 # size of the package it installs, for a package the distribution already has.
-FROM mcr.microsoft.com/devcontainers/typescript-node:4-24-trixie
+FROM mcr.microsoft.com/devcontainers/typescript-node:4-24-trixie@sha256:0cbad76d1987fd35fd78cbc58cbe8c2aa93a8daa45411e52c6c6b63ea2dae202
 
 # DL3008 wants `fish=4.0.2-1`. Pinning an apt package is not the same bargain
 # as pinning an npm one: Debian drops superseded versions from the archive, so