chore(deps): pin dependencies

.github/renovate.json

@@ -13,7 +13,7 @@
     ":disableRateLimiting"
   ],
   "labels": ["dependencies"],
-  "constraints": { "node": "24", "pnpm": "11.2.2" },
+  "constraints": { "node": "24.17.0", "pnpm": "11.2.2" },
   "baseBranchPatterns": ["dev"],
   "minimumReleaseAge": "1 days",
   "packageRules": [

.github/workflows/build.yaml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Build
-      uses: docker/build-push-action@v7
+      uses: docker/build-push-action@v7.2.0
       with:
         build-args: |
           GIT_SHA=${{ github.sha }}

.github/workflows/lint.yaml

@@ -26,13 +26,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
-    - uses: pnpm/action-setup@v6
+      uses: actions/checkout@v6.0.3
+    - uses: pnpm/action-setup@v6.0.9
       with:
         version: 11.2.2
         run_install: false
     - name: Setup Node
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@v6.4.0
       with:
         node-version: 24.15.0
         cache: 'pnpm'
@@ -45,13 +45,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
-    - uses: pnpm/action-setup@v6
+      uses: actions/checkout@v6.0.3
+    - uses: pnpm/action-setup@v6.0.9
       with:
         version: 11.2.2
         run_install: false
     - name: Setup Node
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@v6.4.0
       with:
         node-version: 24.15.0
         cache: 'pnpm'

.github/workflows/nextjs_bundle_analysis.yaml

@@ -16,22 +16,22 @@ jobs:
   analyze:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.3
 
-    - uses: pnpm/action-setup@v6
+    - uses: pnpm/action-setup@v6.0.9
       with:
         version: 11.2.2
         run_install: false
     - name: Setup Node
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@v6.4.0
       with:
         node-version: 24.15.0
         cache: 'pnpm'
     - name: Install dependencies
       run: pnpm ci
 
     - name: Restore next build
-      uses: actions/cache@v5
+      uses: actions/cache@v5.0.5
       id: restore-build-cache
       env:
         cache-name: cache-next-build
@@ -52,7 +52,7 @@ jobs:
       run: npx -p nextjs-bundle-analysis report
 
     - name: Upload bundle
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       with:
         name: bundle
         path: .next/analyze/__bundle_analysis.json
@@ -93,22 +93,22 @@ jobs:
         echo ::set-output name=body::$body
 
     - name: Find Comment
-      uses: peter-evans/find-comment@v4
+      uses: peter-evans/find-comment@v4.0.0
       if: success() && github.event.number
       id: fc
       with:
         issue-number: ${{ github.event.number }}
         body-includes: '<!-- __NEXTJS_BUNDLE -->'
 
     - name: Create Comment
-      uses: peter-evans/create-or-update-comment@v5
+      uses: peter-evans/create-or-update-comment@v5.0.0
       if: success() && github.event.number && steps.fc.outputs.comment-id == 0
       with:
         issue-number: ${{ github.event.number }}
         body: ${{ steps.get-comment-body.outputs.body }}
 
     - name: Update Comment
-      uses: peter-evans/create-or-update-comment@v5
+      uses: peter-evans/create-or-update-comment@v5.0.0
       if: success() && github.event.number && steps.fc.outputs.comment-id != 0
       with:
         issue-number: ${{ github.event.number }}

.github/workflows/release.yml

@@ -25,26 +25,26 @@ jobs:
       new_release_version: ${{ steps.semantic.outputs.new_release_version }}
       release_sha: ${{ steps.release-sha.outputs.sha }}
     steps:
-      - uses: actions/create-github-app-token@v3
+      - uses: actions/create-github-app-token@v3.2.0
         id: app-token
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@v6.0.9
         with:
           version: 11.2.2
           run_install: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24.15.0
           cache: pnpm
@@ -74,21 +74,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
           fetch-tags: true
           ref: ${{ needs.release.outputs.release_sha }}
 
       - name: Login to DockerHub
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.2.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Docker Metadata
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v6.1.0
         with:
           images: informaticsmatters/squonk2-data-manager-ui
           tags: |
@@ -97,7 +97,7 @@ jobs:
             type=raw,value=latest,enable=${{ !contains(needs.release.outputs.new_release_version, '-dev.') }}
 
       - name: Build and push image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v7.2.0
         with:
           context: .
           file: ./Dockerfile

.github/workflows/test.yaml

@@ -46,13 +46,13 @@ jobs:
     environment: data-manager-ui/test
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
-    - uses: pnpm/action-setup@v6
+      uses: actions/checkout@v6.0.3
+    - uses: pnpm/action-setup@v6.0.9
       with:
         version: 11.2.2
         run_install: false
     - name: Setup Node
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@v6.4.0
       with:
         node-version: 24.15.0
         cache: 'pnpm'
@@ -62,7 +62,7 @@ jobs:
     - name: Setup Playwright
       run: pnpm exec playwright install --with-deps
     - name: Load cached build for speed
-      uses: actions/cache@v5
+      uses: actions/cache@v5.0.5
       with:
         path: |
           ${{ github.workspace }}/.next/cache
@@ -100,7 +100,7 @@ jobs:
       run: pnpm test:ci
     - name: Upload test results
       if: always()
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       with:
         name: Test Results
         path: test-results