chore(deps): pin dependencies

pact-foundation · Dec 2, 2024 · 7afe71c · 7afe71c
1 parent e0d0814
commit 7afe71c
Show file tree

Hide file tree

Showing 5 changed files with 109 additions and 108 deletions.
diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
@@ -11,7 +11,7 @@ jobs:
   create_pre_release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - run: GH_CREATE_PRE_RELEASE=true ./script/ci/release.sh
@@ -60,12 +60,12 @@ jobs:
       NODE_VERSION: ${{ matrix.node-version }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -74,7 +74,7 @@ jobs:
 
       - name: Set up QEMU
         if: ${{ matrix.docker == true && matrix.arch == 'arm64' }}
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
       - if: ${{ matrix.docker == true && matrix.alpine == true }}
         name: prebuild linux ${{ matrix.arch }} musl
         run: docker run -v $PWD:/home --platform linux/${{ matrix.arch }} --rm node:20-alpine bin/sh -c 'apk add bash && cd /home && bash -c "/home/script/ci/prebuild-alpine.sh" && rm -rf ffi node_modules'
@@ -90,7 +90,7 @@ jobs:
         if: ${{ matrix.docker != true }}
 
       - name: Upload prebuild for ${{ runner.os }}-${{ runner.arch }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           path: prebuilds/*.tar.gz
           name: artifact-${{ matrix.docker == true && matrix.alpine == true && 'linux-musl' || matrix.docker == true && matrix.alpine == false && 'linux' || matrix.os }}-${{ matrix.arch }}
@@ -161,15 +161,15 @@ jobs:
       LOG_LEVEL: debug
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Download prebuilds
-        uses: actions/[email protected]
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -183,7 +183,7 @@ jobs:
 
       - name: Set up QEMU
         if: ${{ matrix.docker == true && matrix.arch == 'arm64' }}
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
 
       - if: ${{ matrix.docker == true && matrix.alpine != true && matrix.arch == 'arm64' }}
         name: test arm64
@@ -206,12 +206,12 @@ jobs:
       NODE_VERSION: 20
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: 'https://registry.npmjs.org'

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -14,12 +14,12 @@ jobs:
       NODE_VERSION: 20
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: 'https://registry.npmjs.org'

diff --git a/.github/workflows/update-ffi.yml b/.github/workflows/update-ffi.yml
@@ -9,7 +9,7 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
     - run: |
         git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com"

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -50,54 +50,54 @@
     "underscore": "1.12.1"
   },
   "devDependencies": {
-    "@grpc/grpc-js": "^1.8.0",
-    "@grpc/proto-loader": "^0.7.3",
-    "@pact-foundation/pact-js-prettier-config": "^1.0.0",
-    "@snyk/protect": "^1.1118.0",
-    "@tsconfig/node14": "^1.0.3",
-    "@types/basic-auth": "^1.1.2",
+    "@grpc/grpc-js": "1.8.22",
+    "@grpc/proto-loader": "0.7.7",
+    "@pact-foundation/pact-js-prettier-config": "1.0.0",
+    "@snyk/protect": "1.1186.0",
+    "@tsconfig/node14": "1.0.3",
+    "@types/basic-auth": "1.1.3",
     "@types/chai": "4.1.2",
     "@types/chai-as-promised": "7.1.0",
-    "@types/check-types": "^7.3.2",
-    "@types/cors": "^2.8.6",
-    "@types/decompress": "^4.2.3",
+    "@types/check-types": "7.3.4",
+    "@types/cors": "2.8.13",
+    "@types/decompress": "4.2.4",
     "@types/express": "4.11.1",
     "@types/mocha": "9.0.0",
     "@types/needle": "2.5.2",
-    "@types/node": "^18.11.10",
-    "@types/rimraf": "^2.0.2",
-    "@types/sinon": "^9.0.11",
-    "@types/tar": "^4.0.3",
+    "@types/node": "18.16.18",
+    "@types/rimraf": "2.0.5",
+    "@types/sinon": "9.0.11",
+    "@types/tar": "4.0.5",
     "@types/underscore": "1.8.7",
-    "@types/unixify": "^1.0.0",
-    "@types/url-join": "^4.0.0",
-    "@typescript-eslint/eslint-plugin": "^5.47.0",
-    "@typescript-eslint/parser": "^5.47.0",
-    "axios": "^1.6.0",
+    "@types/unixify": "1.0.0",
+    "@types/url-join": "4.0.1",
+    "@typescript-eslint/eslint-plugin": "5.60.1",
+    "@typescript-eslint/parser": "5.60.1",
+    "axios": "1.7.4",
     "basic-auth": "2.0.0",
-    "body-parser": "^1.18.2",
+    "body-parser": "1.20.3",
     "chai": "4.1.2",
     "chai-as-promised": "7.1.1",
-    "commit-and-tag-version": "^11.1.0",
+    "commit-and-tag-version": "11.2.2",
     "cors": "2.8.4",
-    "cross-env": "^5.1.3",
+    "cross-env": "5.2.1",
     "decamelize": "2.0.0",
-    "eslint": "^8.30.0",
-    "eslint-config-airbnb-base": "^15.0.0",
-    "eslint-config-airbnb-typescript": "^17.0.0",
-    "eslint-config-prettier": "^8.5.0",
-    "eslint-import-resolver-typescript": "^3.5.2",
-    "eslint-plugin-chai-friendly": "^0.7.2",
-    "eslint-plugin-import": "^2.26.0",
-    "eslint-plugin-mocha": "^10.1.0",
+    "eslint": "8.43.0",
+    "eslint-config-airbnb-base": "15.0.0",
+    "eslint-config-airbnb-typescript": "17.0.0",
+    "eslint-config-prettier": "8.8.0",
+    "eslint-import-resolver-typescript": "3.5.5",
+    "eslint-plugin-chai-friendly": "0.7.2",
+    "eslint-plugin-import": "2.27.5",
+    "eslint-plugin-mocha": "10.1.0",
     "express": "4.21.1",
-    "form-data": "^4.0.0",
-    "grpc-promise": "^1.4.0",
-    "mocha": "^9.1.3",
-    "node-addon-api": "^6.1.0",
-    "nodemon": "^2.0.4",
-    "prettier": "^2.3.0",
-    "protobufjs": "^7.2.4",
+    "form-data": "4.0.0",
+    "grpc-promise": "1.4.0",
+    "mocha": "9.2.2",
+    "node-addon-api": "6.1.0",
+    "nodemon": "2.0.22",
+    "prettier": "2.8.8",
+    "protobufjs": "7.2.5",
     "rimraf": "2.7.1",
     "sinon": "9.2.4",
     "ts-node": "10.9.1",