chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
public.ecr.aws/sam/build-python3.14	final	pinDigest	→ 784b06d
ubuntu	final	pinDigest	→ f3d2860

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[wpessers]

@thompson-tomo I had accidentally approved this one since pinning that base image for the ruby image makes sense and is harmless. But now I noticed this pr would supposedly also pin some base image for python, but that seems to not have landed in the PR really 🤔

[wpessers]

opentelemetry-lambda/python/src/otel/Dockerfile

Lines 1 to 3 in de3e9d0

	ARG runtime=python3.14
	FROM public.ecr.aws/sam/build-${runtime}

Guessing this doesn't play nice with renovate. I believe we could just inline the arg and pin to the right image digest, and then renovate should be good to go with that one as well.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.