Skip to content

Commit 9722dc4

Browse files
ahennrahennr
authored
Merge pull request #2891 from terrestris/renovate/pin-dependencies
chore(deps): pin dependencies
2 parents f99637e + 238de71 commit 9722dc4

17 files changed

Lines changed: 5716 additions & 4233 deletions

File tree

‎.github/workflows/on-pull-request.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ jobs:
77
runs-on: ubuntu-latest
88
steps:
99
- name: Checkout sources 🔰
10-
uses: actions/checkout@v6
10+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1111
with:
1212
fetch-depth: 0
1313

@@ -18,12 +18,12 @@ jobs:
1818
git checkout -
1919
2020
- name: Setup Node.js 🧮
21-
uses: actions/setup-node@v6
21+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2222
with:
2323
node-version: 24
2424

2525
- name: Cache Node.js modules 💾
26-
uses: actions/cache@v5
26+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
2727
with:
2828
path: ~/.npm
2929
key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -78,7 +78,7 @@ jobs:
7878
7979
- name: Jest Coverage Comment 💬
8080
if: ${{ github.actor != 'dependabot[bot]' }}
81-
uses: MishaKav/jest-coverage-comment@main
81+
uses: MishaKav/jest-coverage-comment@fb83bcbaeb5ca467936175796f862a2992938833 # main
8282
with:
8383
hide-comment: false
8484
create-new-comment: false
@@ -100,7 +100,7 @@ jobs:
100100

101101
- name: Post To No Tests Found Comment ⚠️
102102
if: ${{ env.no_tests_found == 'true' && github.actor != 'dependabot[bot]' }}
103-
uses: peter-evans/create-or-update-comment@v5
103+
uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5
104104
with:
105105
comment-id: ${{ env.COVERAGE_COMMENT_ID }}
106106
body: |

‎.github/workflows/on-push-main.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -13,15 +13,15 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- name: Checkout sources 🔰
16-
uses: actions/checkout@v6
16+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1717

1818
- name: Setup Node.js 🧮
19-
uses: actions/setup-node@v6
19+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2020
with:
2121
node-version: 24
2222

2323
- name: Cache Node.js modules 💾
24-
uses: actions/cache@v5
24+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
2525
with:
2626
path: ~/.npm
2727
key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -36,22 +36,22 @@ jobs:
3636
run: npm run build
3737

3838
- name: Deploy (to latest) 🚀
39-
uses: JamesIves/github-pages-deploy-action@v4.8.0
39+
uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0
4040
with:
4141
token: ${{ secrets.GITHUB_TOKEN }}
4242
branch: gh-pages
4343
folder: build
4444
target-folder: latest
4545

4646
- name: Login to Nexus ⌨️
47-
uses: docker/login-action@v3
47+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
4848
with:
4949
registry: ${{ env.DOCKER_REGISTRY }}
5050
username: ${{ secrets.NEXUS_USERNAME }}
5151
password: ${{ secrets.NEXUS_PASSWORD }}
5252

5353
- name: Build docker image (main) 🏗️
54-
uses: docker/build-push-action@v6
54+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
5555
with:
5656
context: .
5757
tags: |
@@ -63,7 +63,7 @@ jobs:
6363
docker push ${{ env.DOCKER_REGISTRY }}/shogun-gis-client:main
6464
6565
- name: Build docker image e2e-tests (main) 🏗️
66-
uses: docker/build-push-action@v6
66+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
6767
with:
6868
file: Dockerfile.e2e
6969
context: .
@@ -81,18 +81,18 @@ jobs:
8181
runs-on: ubuntu-latest
8282
steps:
8383
- name: Checkout sources 🔰
84-
uses: actions/checkout@v6
84+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
8585
with:
8686
# Disabling shallow clone is recommended for improving relevancy of reporting
8787
fetch-depth: 0
8888

8989
- name: Setup Node.js 🧮
90-
uses: actions/setup-node@v6
90+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
9191
with:
9292
node-version: 24
9393

9494
- name: Cache Node.js modules 💾
95-
uses: actions/cache@v5
95+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
9696
with:
9797
path: ~/.npm
9898
key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -113,7 +113,7 @@ jobs:
113113
echo "sonar.projectVersion=$(git describe --tags --abbrev=0 | sed 's/^v//')" >> ./sonar-project.properties
114114
115115
- name: SonarQube Scan 🔬
116-
uses: SonarSource/sonarqube-scan-action@v8.2.0
116+
uses: SonarSource/sonarqube-scan-action@713881670b6b3676cda39549040e2d88c70d582e # v8.2.0
117117
with:
118118
projectBaseDir: .
119119
env:

‎.github/workflows/on-release.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,15 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: Checkout sources 🔰
12-
uses: actions/checkout@v6
12+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1313

1414
- name: Setup Node.js 🧮
15-
uses: actions/setup-node@v6
15+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
1616
with:
1717
node-version: 24
1818

1919
- name: Cache Node.js modules 💾
20-
uses: actions/cache@v5
20+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
2121
with:
2222
path: ~/.npm
2323
key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -36,7 +36,7 @@ jobs:
3636
echo "VERSION=$(node -pe "require('./package.json').version")" >> $GITHUB_ENV
3737
3838
- name: Deploy (to v${{ env.VERSION }}) 🚀
39-
uses: JamesIves/github-pages-deploy-action@v4.8.0
39+
uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0
4040
with:
4141
token: ${{ secrets.GITHUB_TOKEN }}
4242
branch: gh-pages

‎.github/workflows/release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,15 +20,15 @@ jobs:
2020
new_release_version: ${{ steps.semantic.outputs.new_release_version }}
2121
steps:
2222
- name: Checkout 🔰
23-
uses: actions/checkout@v6
23+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2424

2525
- name: Setup Node.js 🧮
26-
uses: actions/setup-node@v6
26+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2727
with:
2828
node-version: 24
2929

3030
- name: Cache Node.js modules 💾
31-
uses: actions/cache@v5
31+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
3232
with:
3333
path: ~/.npm
3434
key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}

‎.github/workflows/release_docker.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -24,19 +24,19 @@ jobs:
2424
runs-on: ubuntu-latest
2525
steps:
2626
- name: Checkout sources 🔰
27-
uses: actions/checkout@v6
27+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2828
with:
2929
ref: v${{ inputs.release_version }}
3030

3131
- name: Login to Nexus
32-
uses: docker/login-action@v3
32+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
3333
with:
3434
registry: ${{ env.DOCKER_REGISTRY }}
3535
username: ${{ secrets.nexus_user }}
3636
password: ${{ secrets.nexus_pass }}
3737

3838
- name: Build docker image (latest)
39-
uses: docker/build-push-action@v6
39+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
4040
with:
4141
context: .
4242
tags: |
@@ -48,7 +48,7 @@ jobs:
4848
4949
- name: Build docker image (version)
5050
if: ${{ inputs.release_is_published }} == 'true'
51-
uses: docker/build-push-action@v6
51+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
5252
with:
5353
context: .
5454
tags: |
@@ -68,7 +68,7 @@ jobs:
6868
docker push ${{ env.DOCKER_REGISTRY }}/shogun-gis-client:${{ inputs.release_version }}
6969
7070
- name: Build docker image e2e-tests (latest) 🏗️
71-
uses: docker/build-push-action@v6
71+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
7272
with:
7373
file: Dockerfile.e2e
7474
context: .
@@ -78,7 +78,7 @@ jobs:
7878

7979
- name: Build docker image e2e-tests (version) 🏗️
8080
if: ${{ inputs.release_is_published }} == 'true'
81-
uses: docker/build-push-action@v6
81+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
8282
with:
8383
file: Dockerfile.e2e
8484
context: .

‎.github/workflows/update_base_images.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
remaining_tags: ${{ steps.set-tags.outputs.remaining_tags }}
1414
steps:
1515
- name: Checkout sources 🔰
16-
uses: actions/checkout@v6
16+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1717
with:
1818
fetch-depth: 0
1919

‎Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM node:24-alpine AS build
1+
FROM node:24-alpine@sha256:fb71d01345f11b708a3553c66e7c74074f2d506400ea81973343d915cb64eef0 AS build
22

33
RUN apk update && apk upgrade --no-cache
44

@@ -13,7 +13,7 @@ COPY . ./
1313

1414
RUN npm run build
1515

16-
FROM ghcr.io/nginx/nginx-unprivileged:1.31-alpine-perl AS app
16+
FROM ghcr.io/nginx/nginx-unprivileged:1.31-alpine-perl@sha256:cb4fb86d2a93065dce4451d99b6a96ca0fd83caeee98a3bc24c5f5c6d6d58e5d AS app
1717

1818
ENV SHOGUN_GIS_CLIENT_HOST=shogun-gis-client
1919

‎Dockerfile.dev‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM node:24-alpine
1+
FROM node:24-alpine@sha256:fb71d01345f11b708a3553c66e7c74074f2d506400ea81973343d915cb64eef0
22

33
RUN apk update && apk upgrade --no-cache
44

‎Dockerfile.e2e‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM mcr.microsoft.com/playwright:v1.60.0-jammy
1+
FROM mcr.microsoft.com/playwright:v1.60.0-jammy@sha256:e1529a04087193966ea15d4a1617345bdaa0791690a24ab2c42b65f9ce5b2cdc
22

33
WORKDIR /app
44

0 commit comments

Comments
 (0)