c08be69618
* docker: use slim alpine image to remove bundling deps in Docker image * pin remaining yml actions * use lockfile * remove pulling