{"agent":"claude","input":"Pin and upgrade the container images in the react-express-mongodb, nginx-flask-mysql and django stacks only. For each image in compose.yaml and each FROM line in their Dockerfiles, choose the newest tag the application's own dependencies support and pin it as tag@sha256 digest. Try each bump on its own: run docker compose config, then docker compose up --wait, and for services without a healthcheck make one request that proves the app answers. Keep the bumps that pass, leave out any that break the build or the stack and say why with the command output, and open one pull request with one line per bump: file, old reference, new reference, and how it was proven.","resources":[{"url":"https://github.com/your-org/your-app"}]}