chore(deps): pin dependencies

.github/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
@@ -29,13 +29,13 @@ jobs:
       - run: npx nx-cloud start-ci-run --distribute-on="3 linux-medium-js" --stop-agents-after="build"
 
       # Cache node_modules
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: 20
           cache: 'npm'
 
       - run: npm ci --legacy-peer-deps
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@e2e6dc8bce4b0387a05eb687735c39c41580b792 # v4
 
       # Prepend any command with "nx-cloud record --" to record its logs to Nx Cloud
       - run: npx nx-cloud record -- nx format:check

.github/workflows/codeql-analysis.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

package.json

@@ -38,7 +38,7 @@
     "@commitlint/config-conventional": "19.6.0",
     "@commitlint/config-nx-scopes": "19.5.0",
     "@commitlint/cz-commitlint": "19.5.0",
-    "@eslint/js": "^9.8.0",
+    "@eslint/js": "9.11.1",
     "@nx/eslint": "20.2.2",
     "@nx/eslint-plugin": "20.2.2",
     "@nx/jest": "20.2.2",
@@ -54,12 +54,12 @@
     "@types/jest": "29.5.12",
     "@types/node": "18.19.43",
     "@types/semver": "7.5.8",
-    "@vitest/coverage-v8": "^1.0.4",
-    "@vitest/ui": "^1.3.1",
+    "@vitest/coverage-v8": "1.6.0",
+    "@vitest/ui": "1.6.0",
     "commitizen": "4.3.1",
     "dotenv": "16.4.5",
-    "eslint": "^9.8.0",
-    "eslint-config-prettier": "^9.0.0",
+    "eslint": "9.11.1",
+    "eslint-config-prettier": "9.0.0",
     "husky": "9.1.7",
     "is-ci": "3.0.1",
     "jest": "29.7.0",
@@ -71,13 +71,13 @@
     "prettier": "2.8.8",
     "ts-jest": "29.2.4",
     "ts-node": "10.9.2",
-    "tslib": "^2.3.0",
-    "tsx": "^4.17.0",
+    "tslib": "2.8.1",
+    "tsx": "4.17.0",
     "typescript": "5.6.3",
-    "typescript-eslint": "^8.13.0",
-    "verdaccio": "^5.31.1",
-    "vite": "^5.0.0",
-    "vitest": "^1.3.1"
+    "typescript-eslint": "8.17.0",
+    "verdaccio": "5.33.0",
+    "vite": "5.4.11",
+    "vitest": "1.6.0"
   },
   "workspaces": [
     "packages/**",

plugins/nx-container/tests/Dockerfile

@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
 
 RUN echo "Hello world!"