Pin versions of packages installed via apt-get

Dockerfile

@@ -3,9 +3,11 @@ FROM python:${PYTHON_VERSION}-stretch AS builder
 
 ARG NODE_VERSION="8.x"
 RUN curl -sL "https://deb.nodesource.com/setup_${NODE_VERSION}" | bash - \
- && apt-get install nodejs
+ && apt-get install --no-install-recommends -y \
+      nodejs=8.16.0-1nodesource1
 
-RUN apt-get install -y unixodbc-dev
+RUN apt-get install --no-install-recommends -y \
+      unixodbc-dev=2.3.4-1
 
 COPY app/server/static/package*.json /doccano/app/server/static/
 RUN cd /doccano/app/server/static \
@@ -32,11 +34,16 @@ RUN cd /doccano \
 FROM python:${PYTHON_VERSION}-slim-stretch AS runtime
 
 RUN apt-get update \
- && apt-get install -y curl gnupg apt-transport-https \
+ && apt-get install --no-install-recommends -y \
+      curl=7.52.1-5+deb9u9 \
+      gnupg=2.1.18-8~deb9u4 \
+      apt-transport-https=1.4.9 \
  && curl -fsS https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
  && curl -fsS https://packages.microsoft.com/config/debian/9/prod.list > /etc/apt/sources.list.d/mssql.list \
  && apt-get update \
- && ACCEPT_EULA=Y apt-get install -y msodbcsql17 mssql-tools \
+ && ACCEPT_EULA=Y apt-get install --no-install-recommends -y \
+      msodbcsql17=17.3.1.1-1 \
+      mssql-tools=17.3.0.1-1 \
  && apt-get remove -y curl gnupg apt-transport-https \
  && rm -rf /var/lib/apt/lists/*