chore(deps): pin dependencies

.devcontainer/devcontainer.json

@@ -4,9 +4,9 @@
   "name": "LikeC4 Dev",
   "image": "mcr.microsoft.com/devcontainers/javascript-node:22@sha256:bbd5e0faa919bfb7470e649c9f09a0c06546eb9a4c7f18322d35cd2dbfe4a69f",
   "features": {
-    "ghcr.io/devcontainers-contrib/features/dprint-asdf:2": {},
-    "ghcr.io/devcontainers-contrib/features/turborepo-npm:1": {},
-    "ghcr.io/devcontainers-contrib/features/tsx:1": {}
+    "ghcr.io/devcontainers-contrib/features/dprint-asdf:2@sha256:056ad0c43ded376371c6a80d6067453a37316adaf03f9e467a09ecba7c13669e": {},
+    "ghcr.io/devcontainers-contrib/features/turborepo-npm:1@sha256:691d62a3db9f96181d0478fd52178f609cc0bd76edf8eb220cba231540e031a5": {},
+    "ghcr.io/devcontainers-contrib/features/tsx:1@sha256:b4ef8072187fab528b53438cc83b77a655e5cc4a73f0e38f9f125123276e92f2": {}
   },
   "containerEnv": {
     "TURBO_CACHE_DIR": "/workspace/.turbo"

.github/actions/bootstrap/action.yml

@@ -11,7 +11,7 @@ runs:
   using: 'composite'
   steps:
     - name: setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'yarn'
@@ -22,7 +22,7 @@ runs:
     #   run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
 
     - name: cache turbo build
-      uses: actions/cache@v4
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
       if: github.ref == 'refs/heads/main'
       with:
         path: .turbo

.github/workflows/auto-assign.yaml

@@ -10,7 +10,7 @@ jobs:
       pull-requests: write
     steps:
     - name: 'auto-assign issue'
-      uses: pozil/auto-assign-issue@v1
+      uses: pozil/auto-assign-issue@d11e715efc663fe323c3d8d4d3cbbfdddd539baf # v1
       with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           assignees: davydkov

.github/workflows/codeql.yml

@@ -49,11 +49,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -79,6 +79,6 @@ jobs:
       #     ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/docs-astro.yaml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
@@ -39,7 +39,7 @@ jobs:
           yarn build:turbo
 
       - name: upload a build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         with:
           name: docs-astro
           path: apps/docs/dist/
@@ -53,24 +53,24 @@ jobs:
       name: ${{ github.ref == 'refs/heads/main' && 'docs-prod' || 'docs-preview' }}
       url: ${{ steps.cloudflare.outputs.deployment-url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ github.ref }}
 
       - name: setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: '20'
 
       - name: download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
         with:
           name: docs-astro
           path: apps/docs/dist/
 
       - id: cloudflare
         name: publish to cloudflare
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@a08dc762e87e8754e0d56a16a35a70b406bc869f # v3
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CF_ACCOUNT_ID }}

.github/workflows/docs.yaml

@@ -25,13 +25,13 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
 
       - name: Docs NextJS Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         with:
           path: |
             docs/.next/cache
@@ -53,7 +53,7 @@ jobs:
           yarn build
 
       - name: upload a build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         with:
           name: docs-website
           path: docs/out/
@@ -67,20 +67,20 @@ jobs:
       name: preview
       url: ${{ steps.cloudflare.outputs.url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
 
       - name: download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
         with:
           name: docs-website
           path: docs/out/
 
       - id: cloudflare
         name: publish to cloudflare
-        uses: cloudflare/pages-action@v1
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CF_ACCOUNT_ID }}
@@ -105,20 +105,20 @@ jobs:
       name: production
       url: ${{ steps.cloudflare.outputs.url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}
 
       - name: download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
         with:
           name: docs-website
           path: docs/out/
 
       - id: cloudflare
         name: publish to cloudflare
-        uses: cloudflare/pages-action@v1
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CF_ACCOUNT_ID }}

.github/workflows/main.yml

@@ -29,7 +29,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: bootstrap
         uses: ./.github/actions/bootstrap
@@ -48,7 +48,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: bootstrap
         uses: ./.github/actions/bootstrap

.github/workflows/playground.yaml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ github.ref }}
 
@@ -43,7 +43,7 @@ jobs:
           yarn typecheck
 
       - name: upload a build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         with:
           name: playground-website
           path: apps/playground/dist/
@@ -57,24 +57,24 @@ jobs:
       name: ${{ github.ref == 'refs/heads/main' && 'playground-prod' || 'playground-preview' }}
       url: ${{ steps.cloudflare.outputs.deployment-url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ github.ref }}
 
       - name: setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: '20'
 
       - name: download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
         with:
           name: playground-website
           path: apps/playground/dist/
 
       - id: cloudflare
         name: publish to cloudflare
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@a08dc762e87e8754e0d56a16a35a70b406bc869f # v3
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CF_ACCOUNT_ID }}

.github/workflows/push.yaml

@@ -41,7 +41,7 @@ jobs:
 
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ github.ref }}
 
@@ -70,7 +70,7 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           ref: ${{ github.ref }}
 
@@ -96,7 +96,7 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}

.github/workflows/release.yaml

@@ -21,13 +21,13 @@ jobs:
     timeout-minutes: 5
     if: "github.ref == 'refs/heads/main'"
     steps:
-      - uses: wow-actions/use-app-token@v2
+      - uses: wow-actions/use-app-token@d7957e08172ca2e8e49b35b8d266ad585885edc7 # v2
         with:
           fallback: ${{ secrets.GITHUB_TOKEN }}
           app_id: ${{ secrets.BOT_APP_ID }}
           private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           token: ${{ env.BOT_TOKEN }}
           fetch-depth: 0

.github/workflows/trigger-deploy-template.yaml

@@ -10,13 +10,13 @@ jobs:
     name: trigger deploy template
     runs-on: ubuntu-latest
     steps:
-      - uses: wow-actions/use-app-token@v2
+      - uses: wow-actions/use-app-token@d7957e08172ca2e8e49b35b8d266ad585885edc7 # v2
         with:
           app_id: ${{ secrets.BOT_APP_ID }}
           private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
 
       - name: trigger deploy
-        uses: peter-evans/repository-dispatch@v3
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3
         with:
           token: ${{ env.BOT_TOKEN }}
           repository: likec4/template

.github/workflows/vscode.yaml

@@ -24,7 +24,7 @@ jobs:
         contains(github.event.head_commit.message, 'chore: release')
       )
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
           ref: ${{ github.ref }}