chore(deps): pin dependencies

.github/workflows/cd.yml

@@ -14,10 +14,10 @@ jobs:
     name: publish to pypi on new release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: "3.10"
 

.github/workflows/ci-core.yml

@@ -23,10 +23,10 @@ jobs:
           sudo rm -rf "$AGENT_TOOLSDIRECTORY"
           df -h
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -70,7 +70,7 @@ jobs:
           poetry run coverage xml
 
       - name: Report coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.xml

.github/workflows/ci-extensions.yml

@@ -23,10 +23,10 @@ jobs:
           sudo rm -rf "$AGENT_TOOLSDIRECTORY"
           df -h
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -164,7 +164,7 @@ jobs:
           poetry run coverage xml
 
       - name: Report coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.xml

docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   postgresql:
-    image: postgres:14.2-alpine
+    image: postgres:14.2-alpine@sha256:20e49432a20e1a63bb985977c32ec8f110bc609b93de35ad4f19c5486abcefaa
     environment:
       POSTGRES_USER: pandasai
       POSTGRES_PASSWORD: password123

extensions/sandbox/docker/pandasai_docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.9
+FROM python:3.9@sha256:1f13ce12331c2d7d62f4f21a75e8794f4871bfeb95f4f480820cc077386652ff
 
 LABEL image_name="pandasai-sandbox"
 

pyproject.toml

@@ -34,16 +34,16 @@ pyyaml = "^6.0.2"
 optional = true
 
 [tool.poetry.group.dev.dependencies]
-pre-commit = "^3.2.2"
-ruff = "^0.1.0"
-codespell = "^2.2.0"
-pytest = "^8.0.0"
-pytest-mock = "^3.10.0"
-pytest-env = "^0.8.1"
-click = "^8.1.3"
-coverage = "^7.2.7"
-sourcery = "^1.11.0"
-openai = "^1.60.0"
+pre-commit = "3.5.0"
+ruff = "0.1.15"
+codespell = "2.4.1"
+pytest = "8.3.5"
+pytest-mock = "3.14.0"
+pytest-env = "0.8.2"
+click = "8.1.8"
+coverage = "7.6.1"
+sourcery = "1.33.0"
+openai = "1.60.2"
 
 [tool.poetry.scripts]
 pai = "pandasai.cli.main:cli"