Merge pull request #54 from InteractionDesignFoundation/renovate/pin-dependencies

Pin dependencies

Author: alies-dev

.github/workflows/format_php.yml

@@ -13,16 +13,16 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 7
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ github.head_ref }}
 
       # mtime needs to be restored for PHP-CS-Fixer cache to work correctly
       - name: Restore timestamps
-        uses: chetan/git-restore-mtime-action@v2
+        uses: chetan/git-restore-mtime-action@d186aca54f8760da4dec55313195e51ed3ebb0b3 # v2
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
         with:
           php-version: 8.4
           coverage: none
@@ -36,23 +36,23 @@ jobs:
           echo "::set-output name=dir::$(composer config cache-files-dir)"
 
       - name: Retrieve Composer’s cache
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }}
           restore-keys: |
             ${{ runner.os }}-composer-
 
       - name: Retrieve PHP-CS-Fixer’s cache
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: .php-cs-fixer.cache
           key: ${{ runner.os }}-php-cs-fixer-${{ hashFiles('.php-cs-fixer.php') }}
           restore-keys: |
             ${{ runner.os }}-php-cs-fixer-
 
       - name: Retrieve PHPCS’s cache
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: .phpcs.cache
           key: ${{ runner.os }}-phpcs-${{ hashFiles('phpcs.xml') }}
@@ -77,7 +77,7 @@ jobs:
 
       - name: Commit PHP code-style fixes (if any)
         if: ${{ steps.lint_php.outcome == 'failure' }}
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
         with:
           message: '#15000 🪄️ Apply coding style fixes to PHP'
           committer_name: GitHub Actions

.github/workflows/psalm.yml

@@ -11,16 +11,16 @@ jobs:
     name: psalm
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
         with:
           php-version: '8.3'
           coverage: none
 
       - name: Cache composer dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: vendor
           key: composer-${{ hashFiles('composer.json') }}
@@ -31,7 +31,7 @@ jobs:
           composer install -n --prefer-dist
 
       - name: Restore timestamps
-        uses: chetan/git-restore-mtime-action@v2
+        uses: chetan/git-restore-mtime-action@d186aca54f8760da4dec55313195e51ed3ebb0b3 # v2
 
       - run: composer global require cpx/cpx
 

.github/workflows/run-tests.yml

@@ -22,10 +22,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
         with:
           php-version: ${{ matrix.php }}
           coverage: none
@@ -52,15 +52,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: 24
 
       - name: Cache yarn dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         id: npm-node_modules-cache
         with:
           path: node_modules

package.json

@@ -14,10 +14,10 @@
         "nova:install": "npm --prefix='./vendor/laravel/nova' ci"
     },
     "devDependencies": {
-        "laravel-mix": "^6.0.43",
-        "sass": "^1.83.0",
-        "sass-loader": "^13.2.0",
-        "vue-loader": "^16.8.3"
+        "laravel-mix": "6.0.49",
+        "sass": "1.100.0",
+        "sass-loader": "13.3.3",
+        "vue-loader": "16.8.3"
     },
     "dependencies": {
         "vue": "^3.2.36"