Merge pull request #718 from laxamentumtech/renovate/pin-dependencies

build(deps): Pin dependencies

.github/workflows/conventional-commits.yml

@@ -9,6 +9,6 @@ jobs:
     name: Conventional Commits
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
 
-      - uses: webiny/[email protected]
+      - uses: webiny/action-conventional-commits@03a9c76bdb2deeaf23f50e8ea9c6e99417bad467 # v1.1.0

.github/workflows/deploy-caprover.yml

@@ -14,10 +14,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
 
       - name: Set up npm
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
         with:
           node-version: '14'
 

.github/workflows/docker-publish.yml

@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
 
       # Login against a Docker registry except on PR
       # https://github.com/docker/login-action

.github/workflows/jest-coverage.yml

@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-latest
     if: "!contains(github.event.head_commit.message, '[skip ci]')"
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/[email protected]
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: pnpm/action-setup@d882d12c64e032187b2edb46d3a0d003b7a43598 # v2.4.0
         with:
           version: latest
-      - uses: ArtiomTr/jest-coverage-report-action@v2
+      - uses: ArtiomTr/jest-coverage-report-action@f1a1382101d9b92b38e3df05c9ed89a834af97c8 # v2
         with:
           test-script: pnpm test
           package-manager: pnpm

.github/workflows/node.js.yml

@@ -21,12 +21,12 @@ jobs:
         node: ["lts/*", "current"]
     name: Node ${{ matrix.node }} sample
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/[email protected]
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: pnpm/action-setup@d882d12c64e032187b2edb46d3a0d003b7a43598 # v2.4.0
         with:
           version: latest
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
         with:
           node-version: ${{ matrix.node-version }}
           cache: "pnpm"

Dockerfile

@@ -1,5 +1,5 @@
 # Base with pnpm installed
-FROM node:lts-alpine AS base
+FROM node:lts-alpine@sha256:a315556d82ef54561e54fca7d8ee333382de183d4e56841dcefcd05b55310f46 AS base
 WORKDIR /app
 
 RUN apk add --no-cache curl \

docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.7"
 
 services:
   node-server:
-    image: ghcr.io/laxamentumtech/audnexus:develop
+    image: ghcr.io/laxamentumtech/audnexus:develop@sha256:5536528ce49ffe84a303eceb39195ab2aaebe8343fbd5ebf0789156bdbe5b04b
     restart: always
     environment:
       ADP_TOKEN: ${NODE_ADP_TOKEN}
@@ -31,7 +31,7 @@ services:
       replicas: 15
 
   mongo:
-    image: mongo:7
+    image: mongo:7@sha256:31bf43c4959c283733a004b0a3a9c4ddc52efafb4cf9a38e42d2da93e9a72546
     restart: always
     volumes:
       - /mnt/docker/mongo/data:/data/db
@@ -41,15 +41,15 @@ services:
       - "27017:27017"
 
   redis:
-    image: redis:alpine
+    image: redis:alpine@sha256:9150d86fe2a9d03bbdb15bb9758fa5e3d24632386af8f6eb4d675ee4c976f499
     restart: always
     networks:
       - internal
     ports:
       - "6379:6379"
 
   traefik:
-    image: traefik:v3.0
+    image: traefik:v3.0@sha256:50f2f4ff3cf2ecb4c9b8851ee9f83531663875ffc9c77a3e81371949bbb4db2c
     restart: always
     command:
       - "--providers.docker=true"

package.json

@@ -51,7 +51,7 @@
 	},
 	"devDependencies": {
 		"@jest/types": "29.6.3",
-		"@redocly/cli": "^1.0.2",
+		"@redocly/cli": "1.0.2",
 		"@types/html-to-text": "9.0.1",
 		"@types/jest": "29.5.5",
 		"@types/jsrsasign": "10.5.8",