[HarshRajSinghania]

Summary

Pins the Docker images for Redis, Jaeger, Prometheus, and Grafana in docker-compose.yml to reviewed versions (via environment variables with defaults). Adds .env.example and documents the update process in CONTRIBUTING.md.

This makes local stack deployments deterministic and reduces surprise breakage from upstream :latest tags.

Motivation

Addresses #48: Pin container and monitoring image versions.

The issue requested pinning production Compose images for Jaeger, Prometheus, Grafana, and Redis to reviewed versions or configurable variables, plus documentation of the update process.

Implementation

• Updated image references in docker-compose.yml to use ${VAR:-default} syntax:
  • Redis: ${REDIS_VERSION:-7.4}-alpine
  • Jaeger: ${JAEGER_VERSION:-2.22.0}
  • Prometheus: ${PROMETHEUS_VERSION:-v3.13.4} (LTS)
  • Grafana: ${GRAFANA_VERSION:-13.2.4}
• Added .env.example with the current reviewed defaults.
• Appended an "Updating container image versions" section to CONTRIBUTING.md describing the defaults and the review/test process for future updates.

No application code, tests, or other files were changed.

Testing

• Manually inspected the resulting docker-compose.yml for correct variable syntax and that gateway services remain unchanged.
• Confirmed .env.example matches the defaults.
• Verified the full CONTRIBUTING.md content was preserved and the new section was appended.
• Did not run docker compose up in this environment (no Docker daemon available for full stack validation here). The change is limited to image tags and is expected to resolve the same way as the previous :latest / 7-alpine references once pulled.

Closes #48

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud