Pin dependencies (#1778)

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@slonik/migrator](https://togithub.com/mmkal/slonik-tools/tree/master/packages/migrator#readme) ([source](https://togithub.com/mmkal/slonik-tools)) | devDependencies | pin | [`^0.12.0` -> `0.12.0`](https://renovatebot.com/diffs/npm/@slonik%2fmigrator/0.12.0/0.12.0) | | [@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | devDependencies | pin | [`^20.11.16` -> `20.11.24`](https://renovatebot.com/diffs/npm/@types%2fnode/20.11.24/20.11.24) | | [@vitest/coverage-v8](https://togithub.com/vitest-dev/vitest/tree/main/packages/coverage-v8#readme) ([source](https://togithub.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)) | devDependencies | pin | [`^1.1.1` -> `1.3.1`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-v8/1.3.1/1.3.1) | | [actions/checkout](https://togithub.com/actions/checkout) | action | pinDigest | -> `f43a0e5` | | [actions/checkout](https://togithub.com/actions/checkout) | action | pinDigest | -> `b4ffde6` | | [actions/setup-node](https://togithub.com/actions/setup-node) | action | pinDigest | -> `60edb5d` | | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | pinDigest | -> `5d5d22a` | | adminer | | pinDigest | -> `c9592a9` | | [eslint](https://eslint.org) ([source](https://togithub.com/eslint/eslint)) | devDependencies | pin | [`^8.57.0` -> `8.57.0`](https://renovatebot.com/diffs/npm/eslint/8.57.0/8.57.0) | | [eslint-config-prettier](https://togithub.com/prettier/eslint-config-prettier) | devDependencies | pin | [`^9.1.0` -> `9.1.0`](https://renovatebot.com/diffs/npm/eslint-config-prettier/9.1.0/9.1.0) | | [eslint-plugin-prettier](https://togithub.com/prettier/eslint-plugin-prettier) | devDependencies | pin | [`^5.1.3` -> `5.1.3`](https://renovatebot.com/diffs/npm/eslint-plugin-prettier/5.1.3/5.1.3) | | [getsentry/action-release](https://togithub.com/getsentry/action-release) | action | pinDigest | -> `586b623` | | [github/codeql-action](https://togithub.com/github/codeql-action) | action | pinDigest | -> `928ff8c` | | nginx | final | pinDigest | -> `5d3b560` | | [nx](https://nx.dev) ([source](https://togithub.com/nrwl/nx/tree/HEAD/packages/nx)) | devDependencies | pin | [`^18.0.6` -> `18.0.6`](https://renovatebot.com/diffs/npm/nx/18.0.6/18.0.6) | | postgres | | pinDigest | -> `f58300a` | | returntocorp/semgrep | container | pinDigest | -> `7f817a2` | | [typescript](https://www.typescriptlang.org/) ([source](https://togithub.com/Microsoft/TypeScript)) | devDependencies | pin | [`^5.3.3` -> `5.3.3`](https://renovatebot.com/diffs/npm/typescript/5.3.3/5.3.3) | | [vitest](https://togithub.com/vitest-dev/vitest) ([source](https://togithub.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | devDependencies | pin | [`^1.3.1` -> `1.3.1`](https://renovatebot.com/diffs/npm/vitest/1.3.1/1.3.1) | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/rustymotors/server).
rustymotors · Mar 3, 2024 · 21edffd · 21edffd
2 parents 7dc8441 + 8e483b3
commit 21edffd
Show file tree

Hide file tree

Showing 9 changed files with 3,628 additions and 5,138 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -39,11 +39,11 @@ jobs:
 
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v3
+              uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
             # Initializes the CodeQL tools for scanning.
             - name: Initialize CodeQL
-              uses: github/codeql-action/init@v2
+              uses: github/codeql-action/init@928ff8c822d966a999092a6a35e32177899afb7c # v2
               with:
                   languages: ${{ matrix.language }}
                   # If you wish to specify custom queries, you can do so here or in a config file.
@@ -54,7 +54,7 @@ jobs:
             # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
             # If this step fails, then you should remove it and run the build manually (see below)
             - name: Autobuild
-              uses: github/codeql-action/autobuild@v2
+              uses: github/codeql-action/autobuild@928ff8c822d966a999092a6a35e32177899afb7c # v2
 
             # ℹ️ Command-line programs to run using the OS shell.
             # 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
             #   make release
 
             - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@v2
+              uses: github/codeql-action/analyze@928ff8c822d966a999092a6a35e32177899afb7c # v2
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -10,7 +10,7 @@ jobs:
     release-sentry:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
               with:
                   fetch-depth: 0
 
@@ -23,7 +23,7 @@ jobs:
                   pnpm test
 
             - name: Create Sentry release
-              uses: getsentry/action-release@v1
+              uses: getsentry/action-release@586b62368d564f25d694ce05fcb9cf53de65ac4f # v1
               env:
                   SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
                   SENTRY_ORG: ${{ secrets.SENTRY_ORG }}

diff --git a/.github/workflows/node.yml b/.github/workflows/node.yml
@@ -20,11 +20,11 @@ jobs:
                 node-version: [20.x, 21.x]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
               with:
                   fetch-depth: 0
             - name: Use Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
               with:
                   node-version: ${{ matrix.node-version }}
             - name: Install and test
@@ -52,7 +52,7 @@ jobs:
                   codecovcli --verbose do-upload --fail-on-error --flag transactions --name transactions-${{ matrix.node-version }}
                   codecovcli --verbose do-upload --fail-on-error --flag core --name core-${{ matrix.node-version }}
 
-            - uses: actions/upload-artifact@v4
+            - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4
               with:
                   name: coverage_${{ matrix.node-version }}
                   path: coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,11 +19,11 @@ jobs:
       id-token: write # to enable use of OIDC for npm provenance
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: "lts/*"
       - name: Install dependencies

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -16,8 +16,8 @@ jobs:
         env:
             SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
         container:
-            image: returntocorp/semgrep
+            image: returntocorp/semgrep@sha256:7f817a27f8322550e5569750079c10bdecf90284afb660edc5bb27a4b252d928
         if: (github.actor != 'dependabot[bot]')
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
             - run: semgrep ci
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -11,7 +11,7 @@ services:
         extra_hosts:
             - "host.docker.internal:host-gateway"
     db:
-        image: postgres:latest
+        image: postgres:latest@sha256:f58300ac8d393b2e3b09d36ea12d7d24ee9440440e421472a300e929ddb63460
         restart: always
         environment:
             POSTGRES_DB: rm
@@ -25,7 +25,7 @@ services:
             - no-new-privileges:true
 
     adminer:
-        image: adminer
+        image: adminer@sha256:c9592a99120164a7a4cc75ec76b3632fa3520a4de2d801bbb93c3753fe34e048
         restart: always
         ports:
             - 8080:8080

diff --git a/package.json b/package.json
@@ -16,16 +16,16 @@
         "url": "git@github.com:drazisil/mcos.git"
     },
     "devDependencies": {
-        "@slonik/migrator": "^0.12.0",
-        "@types/node": "^20.11.16",
-        "@vitest/coverage-v8": "^1.1.1",
-        "eslint": "^8.57.0",
-        "eslint-config-prettier": "^9.1.0",
-        "eslint-plugin-prettier": "^5.1.3",
-        "nx": "^18.0.6",
+        "@slonik/migrator": "0.12.0",
+        "@types/node": "20.11.24",
+        "@vitest/coverage-v8": "1.3.1",
+        "eslint": "8.57.0",
+        "eslint-config-prettier": "9.1.0",
+        "eslint-plugin-prettier": "5.1.3",
+        "nx": "18.0.6",
         "prettier": "3.2.4",
-        "typescript": "^5.3.3",
-        "vitest": "^1.3.1"
+        "typescript": "5.3.3",
+        "vitest": "1.3.1"
     },
     "dependencies": {
         "@rustymotors/database": "workspace:^",