From 36693b4912f9438ba04dc293ea0be9b4a9dc1de9 Mon Sep 17 00:00:00 2001 From: Renovate Date: Thu, 10 Sep 2026 00:34:38 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/conventional-commit-pr-title.yml | 2 +- .github/workflows/dist.yml | 4 ++-- .github/workflows/release-please.yml | 6 +++--- .github/workflows/test.yml | 6 +++--- .github/workflows/update-dependencies.yml | 2 +- package-lock.json | 1 + package.json | 2 +- 8 files changed, 16 insertions(+), 15 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index ccf05854..02254e22 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -40,11 +40,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.38.0 with: config-file: ./.github/codeql/codeql-config-${{ matrix.language }}.yml languages: ${{ matrix.language }} @@ -52,7 +52,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4 + uses: github/codeql-action/autobuild@v4.38.0 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -66,4 +66,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.38.0 diff --git a/.github/workflows/conventional-commit-pr-title.yml b/.github/workflows/conventional-commit-pr-title.yml index 1bd683f9..cf0b994c 100644 --- a/.github/workflows/conventional-commit-pr-title.yml +++ b/.github/workflows/conventional-commit-pr-title.yml @@ -14,6 +14,6 @@ jobs: permissions: pull-requests: read steps: - - uses: amannn/action-semantic-pull-request@v6 + - uses: amannn/action-semantic-pull-request@v6.1.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml index ea7f0658..d8a182a3 100644 --- a/.github/workflows/dist.yml +++ b/.github/workflows/dist.yml @@ -9,12 +9,12 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.1.0 with: token: ${{ secrets.DEVEX_BOT_TOKEN }} - name: Setup node 24 - uses: actions/setup-node@v6 + uses: actions/setup-node@v6.5.0 with: node-version: 24.11.1 diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 76c562a8..25c0a2c5 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -9,14 +9,14 @@ jobs: release-please-release: runs-on: ubuntu-latest steps: - - uses: google-github-actions/release-please-action@v3 + - uses: google-github-actions/release-please-action@v3.7.13 id: release with: package-name: ${{env.ACTION_NAME}} release-type: node token: ${{ github.token }} command: github-release - - uses: actions/checkout@v3 + - uses: actions/checkout@v3.7.0 - name: Tag major and minor versions if: ${{ steps.release.outputs.release_created }} run: | @@ -36,7 +36,7 @@ jobs: - release-please-release steps: - id: release-pr - uses: google-github-actions/release-please-action@v3 + uses: google-github-actions/release-please-action@v3.7.13 with: token: ${{ secrets.DEVEX_BOT_TOKEN }} release-type: node diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 59227cdd..6e0cd763 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -44,10 +44,10 @@ jobs: statuses: write checks: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.1.0 - name: Setup node 24 - uses: actions/setup-node@v6 + uses: actions/setup-node@v6.5.0 with: node-version: 24.11.1 @@ -62,7 +62,7 @@ jobs: run: npm run all - name: Test Report - uses: dorny/test-reporter@v1 + uses: dorny/test-reporter@v1.9.1 if: success() || failure() with: name: JEST Tests diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml index 8550feeb..90ef8824 100644 --- a/.github/workflows/update-dependencies.yml +++ b/.github/workflows/update-dependencies.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v3.7.0 - name: Self-hosted Renovate uses: renovatebot/github-action@f9c81dddc9b589e4e6ae0326d1e36f6bc415d230 # v39.2.4 diff --git a/package-lock.json b/package-lock.json index 7ca9e068..a87cbe1f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2889,6 +2889,7 @@ "version": "5.0.9", "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" }, diff --git a/package.json b/package.json index 8f7ae4c0..fd5788af 100644 --- a/package.json +++ b/package.json @@ -100,6 +100,6 @@ }, "version": "4.2.2", "overrides": { - "brace-expansion": "^5.0.9" + "brace-expansion": "5.0.9" } }