chore: pin pip dependencies by hash

.devcontainer/Dockerfile

@@ -26,7 +26,7 @@ RUN wget -qO /usr/local/share/ca-certificates/Cisco_Umbrella_Root_CA.crt https:/
 
 # Install some tools via pip to get more recent versions
 COPY .devcontainer/requirements.txt /tmp/requirements.txt
-RUN python3 -m pip install --no-cache-dir -r /tmp/requirements.txt \
+RUN python3 -m pip install --require-hashes --no-cache-dir -r /tmp/requirements.txt \
  && rm -rf /tmp/requirements.txt
 
 # Set default generator for CMake to Ninja

.devcontainer/requirements.txt

@@ -1,2 +1,21 @@
-cmake==3.27.9
-gcovr==6.0
+cmake==3.27.9 \
+    --hash=sha256:07bf268f42c9cdf3b06e04cc145c203b83d5a700f7c2a597772610f48c3dca04 \
+    --hash=sha256:434714990d82e3c3936a726c1706c6a1d5a34964a7415d1433af0904a994e414 \
+    --hash=sha256:5c83fe2c6059aaa3ad86f49e6e3da4483e582994a6c152aa7efa175282f7b207 \
+    --hash=sha256:5c91df483ebaa03107f8b9488de207ff32fc74ef93bba79ac52dd830fff40b06 \
+    --hash=sha256:5e8cc5554de86a072e6cbfef725e7dff542bc164a08f5fd41bc194f7778710b7 \
+    --hash=sha256:64c7cd776d07a82163c3265cc82920e64e328d1c87049644005bfd49e4de4d7b \
+    --hash=sha256:87e95c452e522c9379bbd04b300a0b28ba03841d57532166e109669f82f2bdef \
+    --hash=sha256:8eb760800b8bd0178a29334ea3c729ac0534865a30f40994cdfc9c0897488a9e \
+    --hash=sha256:9163fabf484b437cd11d5abe0b5161de57e9c22c75f779c9e6df7765b8138b42 \
+    --hash=sha256:baad87ffe2b257ad51f66fab23f3ba5c16e24d757ba1543d4edb3b6cb4de47a2 \
+    --hash=sha256:c0603c6dc9c7a4c6fce2717e5813bc6126d86388ce057f5bf1a643384966d784 \
+    --hash=sha256:d3030f9f3773154cf6e8c581eac7b0225822f08d6bce37995180d901dfc62465 \
+    --hash=sha256:d7880be7798bd58e43e0eb2e0ce67e7bb0d2ae29b3dc8f3cfbc1f991ae94305d \
+    --hash=sha256:d8306b6e4442496dc1d87e3e64394ebbf02c04f1c6324a1a37cad3695f7d835a \
+    --hash=sha256:d8a40eef1268c91e5b520b28fd5fe0591d750e48e44276dbfd493a14ee595c41 \
+    --hash=sha256:e09cddb8338aab68b17f99ac0ac39ec3d9f8923f0d1527d25f9b4e1bdf8fa057 \
+    --hash=sha256:f564e739b0ef37c1422fe91938b2ab971e21756b848bf840e3672ef3acacf73f
+gcovr==6.0 \
+    --hash=sha256:2e52019fdb76c6e327f48c2a2d8555fb5e362570b79cc74c5498804d1ce54a60 \
+    --hash=sha256:8638d5f44def10e38e3166c8a33bef6643ec204687e0ac7d345ce41a98c5750b