Merge pull request #347 from trz42/address_pinned_dependencies

fix dependency versions for npm and Docker

Author: ocaisa

.github/workflows/markdown-lint.yml

@@ -10,7 +10,7 @@
 #
 
 name: Markdown Lint
-on: [push, pull_request]
+on: [push, pull_request, workflow_dispatch]
 # Declare default permissions as read only.
 permissions: read-all
 
@@ -24,10 +24,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.0
         with:
-          node-version: '18'
+          node-version: '20'
 
       - name: Install markdownlint-cli
-        run: npm install -g markdownlint-cli
+        run: npm install -g igorshubovych/markdownlint-cli#192ad822316c3a22fb3d3cc8aa6eafa0b8488360 # v0.45.0
+        # SHA from https://github.com/igorshubovych/markdownlint-cli/commit/192ad822316c3a22fb3d3cc8aa6eafa0b8488360
 
       - name: Run markdownlint
-        run: markdownlint "**/*.md" --ignore .git 
+        run: markdownlint "**/*.md" --ignore .git 

containers/Dockerfile.smee-client

@@ -1,7 +1,12 @@
-ARG smee_client_version=4.2.1
+ARG smee_client_version=4.4.1
+# ARG smee_client_version_commit=b837fa85fd05853731160e21356ffd30c8c3e791 # v4.4.1
 
-FROM node:lts-alpine
+# pinning base image to specific hash (corresponding to lts-alpine)
+FROM node@sha256:f36fed0b2129a8492535e2853c64fbdbd2d29dc1219ee3217023ca48aebd3787
 ARG smee_client_version
+# ARG smee_client_version_commit
+
+# Then install
 RUN npm install --global smee-client@${smee_client_version}
 ENTRYPOINT ["smee"]
 CMD ["--help"]