From b0a965b3c28afbe40a193c94a147e3e3e6e61d3b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 13 Sep 2022 20:11:09 +0200 Subject: [PATCH] chore(deps): pin dependencies (#3374) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/ci-e2e-ui.yml | 4 ++-- .github/workflows/ci-e2e.yml | 4 ++-- .github/workflows/ci.yml | 4 ++-- .../workflows/docker-publish-pre-check.yml | 6 ++--- .github/workflows/docker-publish.yml | 4 ++-- .../workflows/e2e-angular-cli-workflow.yml | 12 +++++----- .../workflows/e2e-gatsbyjs-cli-workflow.yml | 4 ++-- .github/workflows/e2e-jest-workflow.yml | 24 +++++++++---------- .github/workflows/registry.yml | 2 +- .github/workflows/release.yml | 4 ++-- 10 files changed, 34 insertions(+), 34 deletions(-) diff --git a/.github/workflows/ci-e2e-ui.yml b/.github/workflows/ci-e2e-ui.yml index 1005cc552..f03885fdd 100644 --- a/.github/workflows/ci-e2e-ui.yml +++ b/.github/workflows/ci-e2e-ui.yml @@ -14,9 +14,9 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Use Node ${{ matrix.node_version }} - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: ${{ matrix.node_version }} - name: Install diff --git a/.github/workflows/ci-e2e.yml b/.github/workflows/ci-e2e.yml index 6b38954ea..b68c6fcbe 100644 --- a/.github/workflows/ci-e2e.yml +++ b/.github/workflows/ci-e2e.yml @@ -14,9 +14,9 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Use Node ${{ matrix.node_version }} - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: ${{ matrix.node_version }} - name: Install diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e5df9bc51..a6c8abdf9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,9 +14,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Use Node ${{ matrix.node_version }} - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: ${{ matrix.node_version }} - name: Install diff --git a/.github/workflows/docker-publish-pre-check.yml b/.github/workflows/docker-publish-pre-check.yml index ddc7d58ae..00cbc1767 100644 --- a/.github/workflows/docker-publish-pre-check.yml +++ b/.github/workflows/docker-publish-pre-check.yml @@ -7,7 +7,7 @@ jobs: name: Test Docker Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Build run: docker build . env: @@ -17,8 +17,8 @@ jobs: name: Test Verdaccio Publish runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Publish - uses: verdaccio/github-actions/publish@v0.4.0 + uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0 with: args: -d diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 6255d89ad..c527ac13b 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -23,8 +23,8 @@ jobs: docker: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: docker/setup-qemu-action@v1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 + - uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # tag=v1 - uses: docker/setup-buildx-action@v1 with: driver-opts: network=host diff --git a/.github/workflows/e2e-angular-cli-workflow.yml b/.github/workflows/e2e-angular-cli-workflow.yml index 33f97b374..ac18d7401 100644 --- a/.github/workflows/e2e-angular-cli-workflow.yml +++ b/.github/workflows/e2e-angular-cli-workflow.yml @@ -46,10 +46,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 14.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 14.x - name: 'install latest npm' @@ -83,10 +83,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 14.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 14.x - name: 'install latest npm' @@ -120,10 +120,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 16.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 16.x - name: 'install latest npm' diff --git a/.github/workflows/e2e-gatsbyjs-cli-workflow.yml b/.github/workflows/e2e-gatsbyjs-cli-workflow.yml index 6517bac8d..dc21462c6 100644 --- a/.github/workflows/e2e-gatsbyjs-cli-workflow.yml +++ b/.github/workflows/e2e-gatsbyjs-cli-workflow.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 14.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 14.x - name: 'install npm 6' diff --git a/.github/workflows/e2e-jest-workflow.yml b/.github/workflows/e2e-jest-workflow.yml index fc995e2e6..0a67fe327 100644 --- a/.github/workflows/e2e-jest-workflow.yml +++ b/.github/workflows/e2e-jest-workflow.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 12.x - name: Install Dependencies @@ -43,10 +43,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 12.x - name: Install Dependencies @@ -77,10 +77,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 12.x - name: 'install latest npm' @@ -110,10 +110,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 12.x - name: 'install latest npm' @@ -144,10 +144,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 12.x - name: 'install latest pnpm' @@ -177,10 +177,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Use Node.js 12.x' - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 16.x - name: 'install latest pnpm' diff --git a/.github/workflows/registry.yml b/.github/workflows/registry.yml index 4fe3a2d3d..3bd8c5ce9 100644 --- a/.github/workflows/registry.yml +++ b/.github/workflows/registry.yml @@ -8,6 +8,6 @@ jobs: runs-on: ubuntu-latest steps: - name: Test for public javascript library vulnerabilities - uses: lirantal/is-website-vulnerable@1.15.10 + uses: lirantal/is-website-vulnerable@02d7916b29a1fd9d6a9bea0d83960d4288afa1a6 # tag=1.15.10 with: scan-url: "https://registry.verdaccio.org" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 528801d9b..18e38ec1f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,9 +9,9 @@ jobs: name: Release runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3.0.2 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Use Node (latest) - uses: actions/setup-node@v2.5.1 + uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # tag=v2.5.1 with: node-version: 14 - name: Install