chore(deps): pin dependencies

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
  main:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
  with:
  fetch-depth: 0
 
@@ -28,13 +28,13 @@ jobs:
  run: npx nx-cloud start-ci-run --distribute-on="3 linux-medium-js" --stop-agents-after="build"
 
  # Cache node_modules
- - uses: actions/setup-node@v4
+ - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4
  with:
  node-version: 20
  cache: 'npm'
 
  - run: npm ci
- - uses: nrwl/nx-set-shas@v4
+ - uses: nrwl/nx-set-shas@16efd743af6fc1421daaaa33b61cec4a907b38ed # v4
 
  # Prepend any command with "nx-cloud record --" to record its logs to Nx Cloud
  - run: npx nx-cloud record -- nx format:check

.github/workflows/codeql-analysis.yml

@@ -27,7 +27,7 @@ jobs:
 
  steps:
  - name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.gitlab-ci.yml

@@ -7,7 +7,7 @@ workflow:
  on_new_commit: conservative
 
 default:
- image: node:20
+ image: node:20@sha256:48db4f6ea21d134be744207225753a1730c4bc1b4cdf836d44511c36bf0e34d7
 
 variables:
  CI: 'true'

package.json

@@ -47,8 +47,8 @@
  "@swc-node/register": "1.9.2",
  "@swc/cli": "0.3.12",
  "@swc/core": "1.5.7",
- "@swc/helpers": "~0.5.11",
- "@swc/jest": "~0.2.36",
+ "@swc/helpers": "0.5.11",
+ "@swc/jest": "0.2.36",
  "@types/jest": "29.5.12",
  "@types/node": "18.19.43",
  "@types/semver": "7.5.8",
@@ -69,10 +69,10 @@
  "prettier": "2.8.8",
  "ts-jest": "29.2.4",
  "ts-node": "10.9.2",
- "tsx": "^4.17.0",
+ "tsx": "4.17.0",
  "typescript": "5.5.4",
  "validate-branch-name": "1.3.1",
- "verdaccio": "^5.31.1"
+ "verdaccio": "5.32.1"
  },
  "nx": {
  "includedScripts": []

plugins/nx-container/tests/Dockerfile

@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
 
 RUN echo "Hello world!"