- Update all non-major dependencies with digest and pinDigest (#115)

Co-authored-by: blumilk-renovate[bot] <177020257+blumilk-renovate[bot]@users.noreply.github.com>

.github/workflows/check-pr-title.yml

@@ -9,4 +9,4 @@ jobs:
     name: Check PR title
     runs-on: ubuntu-20.04
     steps:
-      - uses: blumilksoftware/[email protected]
+      - uses: blumilksoftware/action-pr-title@e05fc76a1cc45b33644f1de51218be43ac121dd0 # v1.2.0

.github/workflows/deploy-to-beta-by-push.yml

@@ -22,7 +22,7 @@ jobs:
         run: echo "BRANCH_NAME=$GITHUB_REF_NAME" >> $GITHUB_ENV
 
       - name: checkout
-        uses: actions/[email protected].1
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
           ref: ${{ env.BRANCH_NAME }}
@@ -37,25 +37,25 @@ jobs:
         run: echo "DEPLOYMENT_PROJECT_VERSION=$(bash ./environment/prod/deployment/scripts/version.sh --long)" >> $GITHUB_ENV
 
       - name: set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.3.0
+        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
 
       - name: login to GitHub Container Registry
-        uses: docker/login-action@v3.1.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
       - name: Docker meta
         id: meta
-        uses: docker/[email protected]
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
         with:
           images: ghcr.io/${{ github.repository_owner }}/${{ env.REPO_NAME }}
           tags: type=raw,value=beta
           context: git
 
       - name: build and push image
-        uses: docker/build-push-action@v5.3.0
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
         with:
           context: .
           file: ./environment/prod/app/Dockerfile
@@ -67,7 +67,7 @@ jobs:
           cache-to: type=gha, ref=ghcr.io/${{ github.repository_owner }}/${{ env.REPO_NAME }}-beta-build-cache, mode=max
 
       - name: copy files via ssh
-        uses: appleboy/[email protected]
+        uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634 # v0.1.7
         with:
           timeout: 10s
           command_timeout: 10m
@@ -81,7 +81,7 @@ jobs:
           rm: true
 
       - name: run deployment script over ssh
-        uses: appleboy/[email protected]
+        uses: appleboy/ssh-action@029f5b4aeeeb58fdfe1410a5d17f967dacf36262 # v1.0.3
         with:
           timeout: 10s
           command_timeout: 10m

.github/workflows/test-and-lint-js.yml

@@ -18,17 +18,17 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/[email protected].1
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Cache dependencies
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: node_modules
           key: ${{ runner.os }}-npm-dependencies-${{ hashFiles('package.lock') }}
           restore-keys: ${{ runner.os }}-npm-dependencies
 
       - name: Set up node
-        uses: actions/[email protected].2
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version: 20
 

.github/workflows/test-and-lint-php.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-22.04
     services:
       pgsql:
-        image: postgres:15.2-alpine3.17
+        image: postgres:15.5-alpine3.17@sha256:1961f9d61a86948fb3c02ef87a6616f74f3530d10a1cd299b84abba7ed6db791
         env:
           POSTGRES_DB: keating
           POSTGRES_USER: keating
@@ -34,20 +34,20 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/[email protected].1
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Validate composer.json and composer.lock
         run: composer validate
 
       - name: Cache dependencies
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: vendor
           key: ${{ runner.os }}-composer-dependencies-${{ hashFiles('composer.lock') }}
           restore-keys: ${{ runner.os }}-composer-dependencies
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@2.30.2
+        uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # 2.31.1
         with:
           php-version: 8.2
           extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, pdo_pgsql, intl

composer.json

@@ -8,20 +8,20 @@
     "require": {
         "php": "^8.2",
         "ext-pdo": "*",
-        "fakerphp/faker": "^1.23",
-        "guzzlehttp/guzzle": "^7.8",
+        "fakerphp/faker": "^1.23.1",
+        "guzzlehttp/guzzle": "^7.9.2",
         "inertiajs/inertia-laravel": "^1.3",
-        "laravel/framework": "^11.14",
-        "laravel/sanctum": "^4.0",
+        "laravel/framework": "^11.20.0",
+        "laravel/sanctum": "^4.0.2",
         "laravel/tinker": "^2.9",
-        "spatie/laravel-options": "^1.1",
-        "stevebauman/purify": "^6.0"
+        "spatie/laravel-options": "^1.1.1",
+        "stevebauman/purify": "^6.2.0"
     },
     "require-dev": {
-        "blumilksoftware/codestyle": "^3.2",
-        "mockery/mockery": "^1.6",
-        "nunomaduro/collision": "^8.1",
-        "phpunit/phpunit": "^11.2",
+        "blumilksoftware/codestyle": "^3.3",
+        "mockery/mockery": "^1.6.12",
+        "nunomaduro/collision": "^8.4.0",
+        "phpunit/phpunit": "^11.3.1",
         "spatie/laravel-ignition": "^2.8"
     },
     "autoload": {