Dev Container lock file and Dependabot configuration for devcontainers

[brooke-hamilton]

Thank you for helping make the Radius documentation better!

Please follow this checklist before submitting:

• Read the contribution guide
• Commands include options for Linux, MacOS, and Windows within codetabs
• New file and folder names are globally unique
• Page references use shortcodes instead of markdown or URL links
• Images use HTML style and have alternative text
• Places where multiple code/command options are given have codetabs

In addition, please fill out the following to help reviewers understand this pull request:

Description

Addition of a devcontainer lock file (.devcontainer/devcontainer-lock.json) to pin devcontainer feature versions with integrity hashes, and a new Dependabot configuration entry in .github/dependabot.yml for automated weekly updates of devcontainer features on the edge branch.

Changes

• .devcontainer/devcontainer-lock.json (new): Pins devcontainer features (git, go, hugo, node) to specific versions with SHA-256 integrity hashes for reproducible builds.
• .github/dependabot.yml (modified): Adds a devcontainers package ecosystem entry targeting the edge branch with a weekly update schedule.

Issue reference

N/A — Proactive improvement to pin devcontainer feature versions and enable automated dependency updates.

[github-actions]

Static Web App Preview

Environment	Deployment
pr1776	View workflow run

Deployed from commit d1a8b0c0195837c7a6609a118787328b40effc5f via the publisher workflow.

[DariuszPorowski]

idea: How about keeping version of features explicite in devcontainer.json to be aligned with lock file? like here: https://github.com/radius-project/wellknown/blob/87d878457e7740aa9073f9373025d561986a46b6/.devcontainer/devcontainer.json#L9 Dependabot handles this nicely and versions always match 1:1 between files: https://github.com/radius-project/wellknown/pull/48/changes

[brooke-hamilton]

@copilot implement suggestion in comment #1776 (review)

[Copilot]

@brooke-hamilton I've opened a new pull request, #1781, to work on those changes. Once the pull request is ready, I'll request review from you.

[brooke-hamilton]

idea: How about keeping version of features explicite in devcontainer.json to be aligned with lock file? like here: https://github.com/radius-project/wellknown/blob/87d878457e7740aa9073f9373025d561986a46b6/.devcontainer/devcontainer.json#L9 Dependabot handles this nicely and versions always match 1:1 between files: https://github.com/radius-project/wellknown/pull/48/changes

Good idea. Implemented.