chore(deps): pin dependencies

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
         with:
           fetch-depth: 0
 
@@ -26,12 +26,12 @@ jobs:
         with:
           version: 8
       # Cache node_modules
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
           cache: 'pnpm'
       - run: pnpm install --frozen-lockfile
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@76907e7e5d3cd17ddb5e2b123389f054bffcdd03 # v4
 
       - run: git branch --track main origin/main
         if: ${{ github.event_name == 'pull_request' }}

.github/workflows/codeql-analysis.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/dte-ci.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   main:
     name: Nx Cloud - Main Job
-    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       main-branch-name: main
       number-of-agents: 3
@@ -29,6 +29,6 @@ jobs:
 
   agents:
     name: Nx Cloud - Agents
-    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       number-of-agents: 3

.github/workflows/publish.yml

@@ -19,12 +19,12 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
         with:
           fetch-depth: 0
 
       - name: Install Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
           registry-url: https://registry.npmjs.org/

.gitlab-ci.yml

@@ -6,7 +6,7 @@ stages:
   - build
 
 default:
-  image: node:20.12
+  image: node:20.12@sha256:ec31b4e7762901e0a1cbf5a82ffd66c9798057c50f1b6f33a0089cf0bbbcffed
 
 variables:
   CI: 'true'

package.json

@@ -46,7 +46,7 @@
     "@nx/workspace": "18.3.3",
     "@prisma/client": "5.12.1",
     "@swc-node/register": "1.8.0",
-    "@swc/cli": "~0.1.62",
+    "@swc/cli": "0.1.65",
     "@swc/core": "1.3.95",
     "@types/jest": "29.5.6",
     "@types/node": "18.19.31",
@@ -68,10 +68,10 @@
     "prettier": "2.8.8",
     "ts-jest": "29.1.1",
     "ts-node": "10.9.2",
-    "tsx": "^4.7.2",
+    "tsx": "4.7.2",
     "typescript": "5.4.3",
     "validate-branch-name": "1.3.0",
-    "verdaccio": "^5.27.0"
+    "verdaccio": "5.30.3"
   },
   "packageManager": "pnpm@8.15.7+sha256.50783dd0fa303852de2dd1557cd4b9f07cb5b018154a6e76d0f40635d6cee019",
   "nx": {

packages/nx-container/tests/Dockerfile

@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 
 RUN echo "Hello world!"