From 8e9df78d3c00c1a04288afe2c6bb77b25c840408 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 19 Apr 2025 21:46:24 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .github/workflows/container-scan.yml | 4 ++-- .github/workflows/docker-build.yml | 12 ++++++------ Dockerfile | 4 ++-- package.json | 12 ++++++------ yarn.lock | 12 ++++++------ 5 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml index 7c86ac5..e2c5ff3 100644 --- a/.github/workflows/container-scan.yml +++ b/.github/workflows/container-scan.yml @@ -9,10 +9,10 @@ jobs: name: Container Scan runs-on: docker container: - image: node:20-bullseye + image: node:20-bullseye@sha256:592d1ea2f45d8c96067f81d3a4a6f0d36349c5dab97c14357333e74bf31f1a7d steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - name: Install Docker run: | diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 2c1ca3b..f8ba0af 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -24,17 +24,17 @@ jobs: apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3 with: registry: git.dominikstahl.dev username: ${{ secrets.DOER }} password: ${{ secrets.TOKEN }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3 - name: Get the Ref id: get-ref @@ -48,21 +48,21 @@ jobs: echo "REPO=${GITHUB_REPOSITORY,,}" >>${GITHUB_ENV} - name: Build and push (pull_request) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6 if: github.event_name == 'pull_request' with: push: true tags: git.dominikstahl.dev/${{ env.REPO }}:sha_${{ github.sha }},git.dominikstahl.dev/${{ env.REPO }}:${{ steps.get-ref.outputs.tag}} - name: Build and push (push_tag) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6 if: github.event_name == 'push' && github.ref_type == 'tag' with: push: true tags: git.dominikstahl.dev/${{ env.REPO }}:${{ steps.get-ref.outputs.tag }},git.dominikstahl.dev/${{ env.REPO }}:latest - name: Build and push (push_branch) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6 if: github.event_name == 'push' && github.ref_type == 'branch' with: push: true diff --git a/Dockerfile b/Dockerfile index ec946b1..a3912f7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:22-alpine AS base +FROM node:22-alpine@sha256:9bef0ef1e268f60627da9ba7d7605e8831d5b56ad07487d24d1aa386336d1944 AS base # ----- Dependencies ----- FROM base AS deps @@ -16,7 +16,7 @@ COPY . . RUN yarn build # ----- Runner ----- -FROM gcr.io/distroless/nodejs22-debian12:nonroot AS runner +FROM gcr.io/distroless/nodejs22-debian12:nonroot@sha256:28a71222ea7ab7d16a2abb888484cf40d43d86e053069a624ddb371cc9efdec2 AS runner WORKDIR /app diff --git a/package.json b/package.json index 6a64007..90b5bfe 100644 --- a/package.json +++ b/package.json @@ -15,15 +15,15 @@ "react-dom": "^19.0.0" }, "devDependencies": { - "@eslint/eslintrc": "^3", - "@types/node": "^20", + "@eslint/eslintrc": "3.3.1", + "@types/node": "20.17.30", "@types/react": "^19", "@types/react-dom": "^19", - "eslint": "^9", + "eslint": "9.24.0", "eslint-config-next": "15.3.0", - "eslint-config-prettier": "^10.1.2", - "prettier": "^3.5.3", - "typescript": "^5" + "eslint-config-prettier": "10.1.2", + "prettier": "3.5.3", + "typescript": "5.8.3" }, "packageManager": "yarn@1.22.22+sha1.ac34549e6aa8e7ead463a7407e1c7390f61a6610" } diff --git a/yarn.lock b/yarn.lock index 3bcea26..0f1f21b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -64,7 +64,7 @@ dependencies: "@types/json-schema" "^7.0.15" -"@eslint/eslintrc@^3", "@eslint/eslintrc@^3.3.1": +"@eslint/eslintrc@3.3.1", "@eslint/eslintrc@^3.3.1": version "3.3.1" resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-3.3.1.tgz#e55f7f1dd400600dd066dbba349c4c0bac916964" integrity sha512-gtF186CXhIl1p4pJNGZw8Yc6RlshoePRvE0X91oPGb3vZ8pM3qOS9W9NGPat9LziaBV7XrJWGylNQXkGcnM3IQ== @@ -374,7 +374,7 @@ resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee" integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ== -"@types/node@^20": +"@types/node@20.17.30": version "20.17.30" resolved "https://registry.yarnpkg.com/@types/node/-/node-20.17.30.tgz#1d93f656d3b869dbef7b796568ac457606ba58d0" integrity sha512-7zf4YyHA+jvBNfVrk2Gtvs6x7E8V+YDW05bNfG2XkWDJfYRXrTiP/DsB2zSYTaHX0bGIujTBQdMVAhb+j7mwpg== @@ -1077,7 +1077,7 @@ eslint-config-next@15.3.0: eslint-plugin-react "^7.37.0" eslint-plugin-react-hooks "^5.0.0" -eslint-config-prettier@^10.1.2: +eslint-config-prettier@10.1.2: version "10.1.2" resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-10.1.2.tgz#31a4b393c40c4180202c27e829af43323bf85276" integrity sha512-Epgp/EofAUeEpIdZkW60MHKvPyru1ruQJxPL+WIycnaPApuseK0Zpkrh/FwL9oIpQvIhJwV7ptOy0DWUjTlCiA== @@ -1204,7 +1204,7 @@ eslint-visitor-keys@^4.2.0: resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz#687bacb2af884fcdda8a6e7d65c606f46a14cd45" integrity sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw== -eslint@^9: +eslint@9.24.0: version "9.24.0" resolved "https://registry.yarnpkg.com/eslint/-/eslint-9.24.0.tgz#9a7f2e6cb2de81c405ab244b02f4584c79dc6bee" integrity sha512-eh/jxIEJyZrvbWRe4XuVclLPDYSYYYgLy5zXGGxD6j8zjSAxFEzI2fL/8xNq6O2yKqVt+eF2YhV+hxjV6UKXwQ== @@ -2071,7 +2071,7 @@ prelude-ls@^1.2.1: resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.2.1.tgz#debc6489d7a6e6b0e7611888cec880337d316396" integrity sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g== -prettier@^3.5.3: +prettier@3.5.3: version "3.5.3" resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.5.3.tgz#4fc2ce0d657e7a02e602549f053b239cb7dfe1b5" integrity sha512-QQtaxnoDJeAkDvDKWCLiwIXkTgRhwYDEQCghU9Z6q03iyek/rxRh/2lC3HB7P8sWT2xC/y5JDctPLBIGzHKbhw== @@ -2540,7 +2540,7 @@ typed-array-length@^1.0.7: possible-typed-array-names "^1.0.0" reflect.getprototypeof "^1.0.6" -typescript@^5: +typescript@5.8.3: version "5.8.3" resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.8.3.tgz#92f8a3e5e3cf497356f4178c34cd65a7f5e8440e" integrity sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==