build(docker): use versioned images instead of latest

Dependabot will now monitor version updates instead of just relying on
using latest tag

.github/dependabot.yml

@@ -12,3 +12,9 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10

Dockerfile

@@ -1,5 +1,5 @@
 # build environment
-FROM --platform=$BUILDPLATFORM node:current-alpine as build-stage
+FROM --platform=$BUILDPLATFORM node:14.11.0-alpine3.12 as build-stage
 RUN mkdir /app && chown -R node:node /app
 WORKDIR /app
 RUN apk add --no-cache python make g++
@@ -14,7 +14,7 @@ ARG REVISION
 RUN npm run build
 
 # dependency environment
-FROM node:current-alpine as dependency-stage
+FROM node:14.11.0-alpine3.12 as dependency-stage
 RUN mkdir /app && chown -R node:node /app
 WORKDIR /app
 RUN apk add --no-cache python make g++
@@ -24,7 +24,7 @@ RUN SKIP_BUILD=true npm ci
 RUN npm prune --production
 
 # production environment
-FROM node:current-alpine as production-stage
+FROM node:14.11.0-alpine3.12 as production-stage
 LABEL org.opencontainers.image.title="SyncLounge"
 LABEL org.opencontainers.image.description="Enjoy Plex with your friends. In Sync. Together."
 LABEL org.opencontainers.image.url="https://synclounge.tv/"

Dockerfile.web

@@ -1,5 +1,5 @@
 # build environment
-FROM --platform=$BUILDPLATFORM node:current-alpine as build-stage
+FROM --platform=$BUILDPLATFORM node:14.11.0-alpine3.12 as build-stage
 RUN mkdir /app && chown -R node:node /app
 WORKDIR /app
 RUN apk add --no-cache python make g++
@@ -15,7 +15,7 @@ ARG REVISION
 RUN npm run build
 
 # production environment
-FROM nginx:alpine as production-stage
+FROM nginx:1.19.2-alpine as production-stage
 LABEL org.opencontainers.image.title="SyncLounge Web"
 LABEL org.opencontainers.image.description="Enjoy Plex with your friends. In Sync. Together."
 LABEL org.opencontainers.image.url="https://synclounge.tv/"