chore(maintenance): add --require-hashes flag to pip installs (#1827)

.github/workflows/reusable-publish-docs.yml

@@ -57,7 +57,7 @@ jobs:
           python-version: "3.11"
       - name: Install doc generation dependencies
         run: |
-          pip install -r docs/requirements.txt
+          pip install --require-hashes -r docs/requirements.txt
       - name: Setup doc deploy
         run: |
           git config --global user.name Docs deploy

docs/Dockerfile

@@ -1,4 +1,4 @@
-FROM squidfunk/mkdocs-material@sha256:fc42bac0005e79c2b2dd576e72103b06932c30c7b7b455a1f9cd3d39b187d49d
+FROM squidfunk/mkdocs-material@sha256:9af3b7e58f88c46d85fd3abfd2a8abad2bd157a8baa5ad8303d43ce0bdf098bb
 
-ADD docker-requirements.txt /tmp/docker-requirements.txt
-RUN pip install -r /tmp/docker-requirements.txt
+ADD requirements.txt /tmp/
+RUN pip install --require-hashes -r /tmp/requirements.txt